Wireless communications access security system and method

1. A computer implemented method for wireless communications access security, the method comprising steps that a computer processor of a client device remote from a server computer is programmed to perform, the steps comprising:

by the client device, receiving at least one reference set of values from the server computer, each one of the received reference sets pertaining to a respective access point and defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication of the client device with the access point, such that a deviation of an extracted value from the expected value is indicative of potential threat;

by the client device, extracting at least one value based on measurement of the at least one parameter during the wireless communication of the client device with the access point when active, the active access point being an access point that is administrated by a party other than a user of the client device;

by the client device, detecting a deviation of at least one of the at least one extracted value from at least one of the at least one expected value defined by the respective one of the received reference sets of values pertaining to the active access point that the client device is in communication with; and

by the client device and based on the detected deviation, carrying out at least one step of the group consisting of: alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point, the method further comprising receiving a threat evaluation function from the server computer, wherein the threat evaluation function is a function derived by the server computer from a plurality of parameters measured by a plurality of client devices during wireless communication with access points, wherein a determining of the threat indication is carried out using the threat evaluation function.

2. The method of claim 1 , further comprising restricting the communication with the active access point according to the detected deviation.

3. The method of claim 1 , further comprising detecting the deviation according to global data mapping a plurality of reference values at least according to time and location.

4. The method of claim 1 , further comprising a preliminary step of sending data indicating a location of the client device to the server computer, wherein at least one of the received reference sets is selected by the server computer at least according to the indicated location.

5. The method of claim 1 , wherein at least one of the received reference sets is selected by the server computer at least according to time.

6. The method of claim 1 , further comprising a preliminary step of sending data indicating location of the client device to the server computer, wherein at least one of the reference sets is selected by the server computer at least according to both time and the indicated location.

7. The method of claim 1 , wherein at least one of the reference sets is selected by the server computer at least according to the active access point.

8. The method of claim 1 , wherein each one of the received reference sets is derived by the server computer from a plurality of parameter sets, each parameter set pertaining to respective client device and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the access point and the client device.

9. An apparatus for wireless communications access security, the apparatus comprising:

a computer processor of a client device remote from a server computer;

a function receiver, implemented on said computer processor of the client device, configured to receive at least one reference set of values from the server computer, each one of the received reference sets pertaining to a respective access point and defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication of the client device with the access point, such that a deviation of an extracted value from the expected value is indicative of potential threat;

a parameter measurer, implemented on said computer processor of the client device, configured to extract at least one value based on measurement of the at least one parameter during the wireless communication of the client device with the access point when active, the active access point being an access point that is administrated by a party other than a user of the client device; and

a threat determiner, implemented on said computer processor of the client device, in communication with said parameter measurer, configured to detect a deviation of at least one of the at least one extracted value from at least one of the at least one expected value defined by the respective one of the received reference sets of values pertaining to the active access point that the client device is in communication with; and based on the detected deviation, to carry out at least one step of the group consisting of: alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point, the function receiver further configured to receive a threat evaluation function from the server computer, wherein the threat evaluation function is a function derived by the server computer from a plurality of parameters measured by a plurality of client devices during wireless communication with access points, the threat determiner further configured to determine the threat indication using the threat evaluation function.

10. A non-transitory computer readable medium storing computer processor executable instructions for performing steps of wireless communications access security on a client device remote from a server computer, the steps comprising:

by the client device, receiving at least one reference set of values from the server computer, each one of the received reference sets pertaining to a respective access point and defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication of the client device with the access point, such that a deviation of an extracted value from the expected value is indicative of potential threat;

by the client device, extracting at least one value based on measurement of the at least one parameter during the wireless communication of the client device with the access point when active, the active access point being an access point that is administrated by a party other than a user of the client device; and

by the client device, detecting a deviation of at least one of the at least one extracted value from at least one of the at least one expected value defined by the respective one of the received reference sets of values pertaining to the active access point that the client device is in communication with; and

by the client device and based on the detected deviation, carrying out at least one step of the group consisting of: alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point, the steps further comprising receiving a threat evaluation function from the server computer, wherein the threat evaluation function is a function derived by the server computer from a plurality of parameters measured by a plurality of client devices during wireless communication with access points, wherein a determining of the threat indication is carried out using the threat evaluation function.

11. A computer implemented method for wireless communications access security, the method comprising steps a server computer is programmed to perform, the steps comprising:

from each one of a plurality of client devices remote from the server computer, receiving at least one parameter set, each parameter set pertaining to a respective access point administrated by a party other than a user of the client device, and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the client device and the access point;

deriving a reference set of values for each respective one of the access points from the received at least one parameter set pertaining to the access point, the reference set defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication with the access point, such that a deviation of an extracted value from the expected value is indicative of potential threat; and

providing at least one of the derived reference sets of values to a client device in remote communication with the server computer, thereby allowing the client device hi remote communication with the server computer, to detect a deviation of at least one value extracted by the client device based on measurement of the at least one parameter during the wireless communication of the client device with the access point when the access point is active, from at least one of the at least one expected value defined by the provided reference set of values pertaining to the active access point, and based on the detected deviation, to carry out at least one step of the group consisting of: alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point; the method further comprising receiving a threat evaluation function from the server computer, wherein the server computer derives the deriving the threat evaluation function from a plurality of parameters measured by a plurality of client devices during wireless communication with access points.

12. The method of claim 11 , further comprising a step of selecting the derived reference set for said providing, at least according to location of the client device in communication with the server computer.

13. The method of claim 11 , further comprising a step of selecting the derived reference set for said providing, at least according to time.

14. The method of claim 11 , further comprising a step of selecting the derived reference set for said providing, at least according to both location of the client device in communication with the server computer and time.

15. The method of claim 11 , further comprising a step of selecting the derived reference set for said providing, at least according to an active access point in communication with the client device that is in remote communication with the server computer for said providing.

16. The method of claim 11 , further comprising maintaining global data mapping a plurality of reference values at least according to time and location, wherein at least one of the reference sets provided to the client device in communication with the server computer is based on a sub-portion of the maintained global data.

17. An apparatus for wireless communications access security, the apparatus comprising:

a computer processor of a server computer;

a parameter receiver, implemented on said computer processor, configured to receive from each one of a plurality of client devices remote from the server computer, at least one parameter set, each parameter set pertaining to a respective access point administrated by a party other than a user of the client device, and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the access point and the client device;

other than a user of the client device, and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the access point and the client device;

a function deriver, implemented on said computer processor, in communication with said parameter receiver, configured to derive a reference set of values for each respective one of the access points from the received at least one parameter set pertaining to the access point, the reference set defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication with the access point, such that a deviation of an extracted value from the expected value is indicative of potential threat; and

a function provider, implemented on said computer processor, in communication with said function deriver, configured to provide at least one of the derived reference sets of values to a client device in remote communication with the server computer, thereby allowing the client device in remote communication with the server computer, to detect a deviation of at least one value extracted by the client device based on measurement of the at least one parameter during the wireless communication of the client device with the access point when the access point is active, from at least one of the at least one expected value defined by the provided reference set of values pertaining to the active access point, and based on the detected deviation, to carry out at least one step of the group consisting of: alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point;

the function provider further configured to receive from the function deriver a threat evaluation function, the function deriver further configured to derive the threat evaluation function from a plurality of parameters measured by a plurality of client devices during wireless communication with access points.

18. A non-transitory computer readable medium storing computer processor executable instructions for performing steps of wireless communications access security on a server computer, the steps comprising:

from each one of a plurality of client devices remote from the server computer, receiving at least one parameter set, each parameter set pertaining to a respective access point administrated by a party other than a user of the client device, and comprising at least one value extracted based on measurement of at least one parameter during wireless communication between the client device and the access point;

deriving a reference set of values for each respective one of the access points from the received at least one parameter set pertaining to the access point, the reference set defining at least one value expected to be extracted based on measurement of at least one parameter during wireless communication with the access point, such that a deviation of an extracted value from the expected value is indicative of potential threat; and

providing at least one of the derived reference sets of values to a client device in remote communication with the server computer, thereby allowing the client device in remote communication with the server computer, to detect a deviation of at least one value extracted by the client device based on measurement of the at least one parameter during the wireless communication of the client device with the access point when the access point is active, from at least one of the at least one expected value defined by the provided reference set of values pertaining to the active access point, and based on the detected deviation, to carry out at least one step of the group consisting of: alerting on a threat indication to a user of the client device, restricting the communication of the client device with the active access point, diverting the communication of the client device with the active access point, and suspending the communication of the client device with the active access point;

the steps further comprising receiving a derived threat evaluation function from the server computer, wherein the server computer derives the threat evaluation function from a plurality of parameters measured by a plurality of client devices during wireless communication with access points.