System and method for compact storage and efficient retrieval of access point information for detecting rogue access points
Systems, devices, and methods for communications among access points (APs) and mobile wireless devices are disclosed. A database having a persistent profile table (PPT) can be used to store information related to access point operations. Information related to a plurality of APs can be detected and stored in the PPT. Certain information may be common to multiple of the APs, allowing for compression of the data for more efficient storage. Fingerprint data related to the APs can be clustered based on a first order identifier (e.g., SSID, PLMN) and a second order identifier (e.g., MAC, MAC prefix, cell ID). The clusters can be further compressed by, for example, storing common features only once, and storing uncommon features individually, along with an identifier frame indicating which features are unique within the group of clusters. A mobile device can query the persistent profile table to verify the identity of unknown APs.
1. A method for communication among a wireless mobile device and a plurality of access points, the method comprising:
receiving at a server, and storing to a memory, identification data related to a plurality of known access points, the identification data for each known access point of the plurality of known access points including a first order identifier, a second order identifier, and feature set data representing one or more operating characteristics;
clustering, by the server, the identification data as a plurality of clusters based on a commonality of the first order identifier, and a commonality of at least a portion of the second order identifier;
generating, at the server, a compact feature set for each cluster of the plurality of clusters in the memory based on the feature set data of the known access points within individual clusters, the compact feature set, for each cluster, representative of the one or more operating characteristics that are common across feature set data of the known access points within each respective cluster;
storing, at the server, a representation of common compact feature sets across clusters as a compact table entry having
an identifier frame indicating, for each of the one or more operating characteristics, whether the operating characteristic has a same value or different value among the known access points in each cluster, and
a compressed feature set indicating,
for each of the one or more operating characteristics that have the same value, only a single instance of the same value of the operating characteristic, and,
for each of the one or more operating characteristics that have different values, all of the different values of the operating characteristic among the known access points in each cluster;
receiving, at the server, a prefetch request from the wireless mobile device identifying a new geographic location; and
providing the wireless mobile device identification data related to access points in the new geographic location, wherein the identification data is based at least upon the compact feature sets.
2. The method of claim 1 wherein the classifying further comprises:
grouping the identification data for each of the plurality of known access points into groups based on the first order identifiers of the plurality of known access points; and
within the groups based on the first order identifiers of the plurality of known access points, further grouping the identification data for each of the plurality of known access points into groups based on at least a portion of the second order identifiers of the plurality of known access points.
3. The method of claim 1 wherein the first order identifier comprises a service set identifier (SSID) and the second order identifier comprises a media access control (MAC) address.
4. The method of claim 1 wherein the first order identifier comprises a public land mobile network (PLMN) and the second order identifier comprises a cell identifier (cell ID).
5. The method of claim 4 wherein the at least a portion of the second order identifier comprises a MAC prefix having a first three bytes of a MAC address.
6. The method of claim 1 wherein the providing comprises, transmitting one or more clusters and associated compact feature entries associated with the access points in the new geographic location.
7. The method of claim 1 wherein the providing comprises, transmitting one or more clusters and associated compact feature sets associated with the access points in the new geographic location.
8. A device for communication among a wireless mobile device and a plurality of access points, the device comprising:
a memory operable to store identification data related to a plurality of known access points, the identification data for each known access point of the plurality of known access points including a first order identifier, a second order identifier, and feature set data representing one or more operating characteristics; and
one or more processors communicatively coupled to the memory and operable to,
cluster the identification data as a plurality of clusters based on a commonality of the first order identifier, and a commonality of at least a portion of the second order identifier,
generate a compact feature set for each cluster of the plurality of clusters in the memory based on a commonality of the one or more operating characteristics represented by the feature set data of the known access points within individual clusters,
store a representation of common compact feature sets across clusters as a compact table entry having
an identifier frame indicating, for each of the one or more operating characteristics, whether the operating characteristic has a same value or different value among the known access points in each cluster, and
a compressed feature set indicating,
for each of the one or more operating characteristics that have the same value, only a single instance of the same value of the operating characteristic, and,
for each of the one or more operating characteristics that have different values, all of the different values of the operating characteristic among the known access points in each cluster,
receive a prefetch request from the wireless mobile device identifying a new geographic location, and
provide the wireless mobile device identification data related to access points in the new geographic location, wherein the identification data is based at least upon the compact feature sets.
9. The device of claim 8 wherein the one or more processors are further operable to:
group the identification data for each of the plurality of known access points into groups based on the first order identifiers of the plurality of known access points; and
within the groups based on the first order identifiers of the plurality of known access points, further grouping the identification data for each of the plurality of known access points into groups based on at least a portion of the second order identifiers of the plurality of known access points.
10. The device of claim 8 wherein the first order identifier comprises a service set identifier (SSID) and the second order identifier comprises a media access control (MAC) address.
11. The device of claim 8 wherein the first order identifier comprises a public land mobile network (PLMN) and the second order identifier comprises a cell identifier (cell ID).
12. The device of claim 11 wherein the at least a portion of the second order identifier comprises a MAC prefix having a first three bytes of a MAC address.
13. The device of claim 8 wherein the one or more processors are further operable to transmit one or more clusters and associated compact feature entries associated with the access points in the new geographic location.
14. The device of claim 8 wherein the one or more processors are further operable to transmit one or more clusters and associated compact feature sets associated with the access points in the new geographic location.
15. A non-transitory computer-readable medium in a communications system for communications among a wireless mobile device and a plurality of access points comprising instructions that when executed by a processor, cause a computer to:
receive identification data related to a plurality of known access points, the identification data for each known access point of the plurality of known access points including a first order identifier, a second order identifier, and feature set data representing one or more operating characteristics;
cluster the identification data as a plurality of clusters based on a commonality of the first order identifier, and a commonality of at least a portion of the second order identifier;
generate a compact feature set for each cluster of the plurality of clusters in the memory based on a commonality the one or more operating characteristics represented by the feature set data of the known access points within individual clusters;
store a representation of common compact feature sets across clusters as a compact table entry having
an identifier frame indicating, for each of the one or more operating characteristics, whether the operating characteristic has a same value or different value among the known access points in each cluster, and
a compressed feature set indicating,
for each of the one or more operating characteristics that have the same value, only a single instance of the same value of the operating characteristic, and,
for each of the one or more operating characteristics that have different values, all of the different values of the operating characteristic among the known access points in each cluster;
receive a prefetch request from the wireless mobile device identifying a new geographic location;
provide the wireless mobile device identification data related to access points in the new geographic location, wherein the identification data is based at least upon the compact feature sets.
16. The non-transitory computer-readable medium of claim 15 comprising instructions that further cause the computer to:
group the identification data for each of the plurality of known access points into groups based on the first order identifiers of the plurality of known access points; and
within the groups based on the first order identifiers of the plurality of known access points, further grouping the identification data for each of the plurality of known access points into groups based on at least a portion of the second order identifiers of the plurality of known access points.
17. The non-transitory computer-readable medium of claim 15 wherein the first order identifier comprises a service set identifier (SSID) and the second order identifier comprises a media access control (MAC) address.
18. The non-transitory computer-readable medium of claim 15 wherein the first order identifier comprises a public land mobile network (PLMN) and the second order identifier comprises a cell identifier (cell ID).
19. The non-transitory computer-readable medium of claim 18 wherein the at least a portion of the second order identifier comprises a MAC prefix having a first three bytes of a MAC address.
20. The non-transitory computer-readable medium of claim 15 comprising instructions that further cause the computer to transmit one or more clusters and associated compact feature entries associated with the access points in the new geographic location.
21. The non-transitory computer-readable medium of claim 15 comprising instructions that further cause the computer to transmit one or more clusters and associated compact feature sets associated with the access points in the new geographic location.
22. A method for communication among a wireless mobile device and a plurality of access points, the method comprising:
transmitting a request from the wireless mobile device to a server identifying a new geographic location;
receiving identification data related to a plurality of known access points associated with the new geographic area from the server, the identification data being compressed and grouped as
a plurality of clusters based on a commonality of a first order identifier, and a commonality of at least a portion of a second order identifier of the plurality of known access points, and
at least one compact table entry associated with the plurality of clusters, the at least one compact table entry having
an identifier frame indicating, for each of the one or more operating characteristics, whether the operating characteristic has a same value or different value among the known access points in each cluster, and
a compressed feature set indicating,
for each of the one or more operating characteristics that have the same value, only a single instance of the same value of the operating characteristic, and,
for each of the one or more operating characteristics that have different values, all of the different values of the operating characteristic among the known access points in each cluster;
identifying a suspect access point in the new geographic area, the suspect access point being unknown to the mobile device;
comparing a first order identifier of the suspect access point, at least a portion of a second order identifier of the suspect access point, and a representation of one or more operating characteristics associated with the suspect access point identification data; and
identifying the suspect access point as a trusted access point based on the comparing.
23. The method of claim 22 wherein the first order identifier comprises a service set identifier (SSID) and the second order identifier comprises a media access control (MAC) address.
24. The method of claim 22 wherein the first order identifier comprises a public land mobile network (PLMN) and the second order identifier comprises a cell identifier (cell ID).
25. The method of claim 24 wherein the at least a portion of the second order identifier comprises a MAC prefix having a first three bytes of a MAC address.
26. The method of claim 22 wherein the mobile device stores the compressed identification data in the same compressed form as the server.