PROXIMITY RECOGNITION SYSTEM
Disclosed is an invention for the identification of the true identity of a WLAN device that has been “cloaked” (its source address has the U/L bit set as L), by evaluating its history (recent or distant) of Probe requests for WLAN infrastructure and treating that history as part of its “fingerprint”. Disclosed also is an invention that prompts more management frames from a WLAN device that is sending broadcast Probe requests without specifying a particular network, by presenting the appearance of the presence of popular networks.
1 . A method of increasing the quantity of frames sent by a WLAN mobile device that has sent a probe request, in a venue, comprising the steps of:
a) developing a list of WLAN network SSIDs that are popular in that venue;
b) reading a probe request from the device;
c) if the probe request is a unicast probe request for a specified network SSID, sending a probe response with the source being the value of said specified network SSID; and
d) if the probe request is a broadcast probe request without a specified network SSID, sending a plurality of probe responses with respective sources being the network SSIDs from said list of popular network SSIDs.
2 . A system for increasing the quantity of frames sent by a WLAN mobile device that has sent a probe request, in a venue, comprising:
a) a list of WLAN network SSIDs that are popular in that venue;
b) a reader that read the probe request; and
c) a transmitter that sends a probe response with the source being the value of said specified network SSID, if the probe request is a unicast probe request for a specified network SSID; and
d) a transmitter that sends a plurality of probe responses with respective sources being the network SSIDs from said list of popular network SSIDs.
3 . A method of decloaking a WLAN device that has sent a frame with the source address being locally administered, comprising the steps of:
a) reading and recording a plurality of frames sent;
b) for a first device with a universally administered source address, recording and compiling a list of each unique specified network SSID of each frame that specified;
c) for a second device with a locally administered source address, recording and compiling a list of each unique specified network SSID of each frame that specified;
d) comparing said first device list and said second device list to determine a match;
e) deciding that said second device is said first device if there is a match of lists.
4 . A system of decloaking a WLAN device that has sent a frame with the source address being locally administered, comprising:
a) a reader that reads a plurality of frames sent and a recorder that records them;
b) for a first device with a universally administered source address, the recorder compiles a list of each unique specified network SSID of each frame that specified;
c) for a second device with a locally administered source address, the recorder compiles a list of each unique specified network SSID of each frame that specified;
d) a comparator that compares said first device list and said second device list to determine a match;
e) a decision maker that decides that said second device is said first device if there is a match of lists.