Detection of rogue access point

1. A method for detecting an access point (AP), the method comprising:

sending, by a user equipment (UE), a first AP discovery message including a pre-stored identifier of a known AP previously accessed by the UE;

sending one or more additional AP discovery messages, each additional message including a generated identifier of a non-existent AP;

receiving responses to the first AP discovery message and the one or more additional AP discovery messages, wherein the responses to the one or more additional AP discovery messages include an indication that an identifier of a sender of the responses matches the generated identifier of the non-existent AP; and

determining, by the UE, that a rogue AP is present within a wireless network of the UE based on the responses indicating that one or more non-existent APs are present within the wireless network of the UE.

2. The method of claim 1 , further comprising determining to connect to the known AP based on the responses indicating that known AP is present and no non-existent AP is present within the wireless network of the UE.

3. The method of claim 1 , further comprising in response to determining that a rogue AP is present within the wireless network of the UE, connecting to the known AP, and sending data using encrypted communication.

4. The method of claim 1 , further comprising in response to determining that the rogue AP is present within the wireless network of the UE, reporting the presence of the rogue AP and determining not to connect to the known AP.

5. The method of claim 1 , further comprising:

generating one or more random identifiers and one or more pseudorandom identifiers of non-existent APs; and

including the generated one or more random and pseudorandom identifiers in the one or more additional AP discovery messages.

6. The method of claim 1 , further comprising modifying an address of the UE that is included in one or more of the first AP discovery message and the one or more additional AP discovery messages such that one or more of the first AP discovery message and the one or more additional AP discovery messages include different sender addresses.

7. The method of claim 1 , wherein the first AP discovery message and the one or more additional AP discovery messages are WiFi probes and the pre-stored and generated identifiers are service set identifiers (SSIDs).

8. An apparatus in a user equipment (UE) detecting an access point (AP), the apparatus comprising:

a transceiver configured to:

send a first AP discovery message including a pre-stored identifier of a known AP previously accessed by the UE;

send one or more additional AP discovery messages, each additional message including a generated identifier of a non-existent AP; and

receive responses to the first AP discovery message and the additional AP discovery messages, wherein the responses to the one or more additional AP discovery messages include an indication that an identifier of a sender of the responses matches the generated identifier of the non-existent AP; and

at least one processor configured to determine that a rogue AP is present within a wireless network of the UE based on the responses indicating that one or more non-existent APs are present within the wireless network of the UE.

9. The apparatus of claim 8 , wherein the at least one processor is configured to determine to connect to the known AP based on the responses indicating that known AP is present and no non-existent AP is present within the wireless network of the UE.

10. The apparatus of claim 8 , wherein the at least one processor is configured to, in response to determining that a rogue AP is present within the wireless network of the UE, cause the UE to connect to the known AP and the transceiver to send data using encrypted communication.

11. The apparatus of claim 8 , wherein the at least one processor is configured to, in response to determining that the rogue AP is present within the wireless network of the UE, cause at least one of the transceiver and a display to report the presence of the rogue AP and to determine not to connect the UE to the known AP.

12. The apparatus of claim 8 , wherein the at least one processor is configured to:

generate one or more random identifiers and one or more pseudorandom identifiers of non-existent APs; and

cause the transceiver to include the generated one or more random and pseudorandom identifiers in the one or more additional AP discovery messages.

13. The apparatus of claim 8 , wherein the at least one processor is configured to modify an address of the UE that is included in one or more of the first AP discovery message and the one or more additional AP discovery messages such that one or more of the first AP discovery message and the one or more additional AP discovery messages include different sender addresses.

14. The apparatus of claim 8 , wherein the first AP discovery message and the one or more additional AP discovery messages are WiFi probes and the pre-stored and generated identifiers are service set identifiers (SSIDs).

15. A non-transitory computer readable medium embodying a computer program for detecting an access point (AP), the computer program comprising program code that when executed causes at least one processor to:

cause a transceiver to send a first AP discovery message including a pre-stored identifier of a known AP previously accessed by a user equipment (UE);

cause a transceiver to send one or more additional AP discovery messages, each additional message including a generated identifier of a non-overlapping AP;

receive, via the transceiver, responses to the first AP discovery message and the one or more additional AP discovery messages, wherein the response indicate a presence of non-overlapping APs; and

determine that a rogue AP is present within a wireless network of the UE based on the responses indicating that one or more non-overlapping APs are present within the wireless network of the UE.

16. The computer readable medium of claim 15 , the computer program further comprising program code that when executed causes at least one processor to determine to connect to the known AP based on the responses indicating that known AP is present and no non-overlapping AP is present within the wireless network of the UE.

17. The computer readable medium of claim 15 , the computer program further comprising program code that when executed causes at least one processor to, in response to determining that a rogue AP is present within the wireless network of the UE, connect the UE to the known AP, and cause a transceiver to send data using encrypted communication.

18. The computer readable medium of claim 15 , the computer program further comprising program code that when executed causes at least one processor to, in response to determining that the rogue AP is present within the wireless network of the UE, cause at least one of a transceiver and a display to report the presence of the rogue AP and to determine not to connect the UE to the known AP.

19. The computer readable medium of claim 15 , the computer program further comprising program code that when executed causes at least one processor to:

generate one or more random identifiers and one or more pseudorandom identifiers of non-existent APs; and

cause a transceiver to include the generated one or more random and pseudorandom identifiers in the one or more additional AP discovery messages.

20. The computer readable medium of claim 15 , the computer program further comprising program code that when executed causes at least one processor to modify an address of the UE that is included in one or more of the first AP discovery message and the one or more additional AP discovery messages such that one or more of the first AP discovery message and the one or more additional AP discovery messages include different sender addresses.