Access point port security system
Access point network equipment has communication ports that allow communications with other network components. Communications cables coupled to ports can be easily removed and replaced with unauthorized devices that have access to the network creating a security breach. When an authorized cable or plug is removed from a port, a link down event can be detected by tamper detection by tamper detection software running on the access point network equipment. When a link down events is detected the tamper detection software can perform various possible security actions to protect the network.
1 . A network security system comprising:
a network access point equipment having a processor, a plurality of communication connector ports, electrical contacts in each of the plurality of communication connector ports, tamper detection software running on the processor of the computer network access point, for detecting a link down event at any of the plurality of communication connector ports, and a memory coupled in communication with the processor; and
a first connector plug in a first of the plurality of communication connector ports of the network access point equipment, the first connector plug having a plurality of conductive connectors in contact with the electrical contacts in a first port of the plurality of communication connector ports and a first pair of the plurality of conductive connectors in the first connector plug are electrically coupled;
wherein the memory stores a normal electrical signal from the first pair of the plurality of conductive connectors that are electrically coupled and the tamper detection software compares operating signals from plurality of communication connector ports to the normal operating signals stored in the memory to identify the link down event when the first connector plug is removed from the first of the plurality of connector ports.
2 . The network security system of claim 1 , further comprising:
a locking cover secured around the first connector plug to prevent removal of the first connector plug from the network access point equipment.
3 . The network security system of claim 1 , wherein a second pair of the plurality of conductive connectors are electrically coupled in the first connector plug and the memory stores the normal electrical signal that includes second pair of the plurality of conductive connectors that are electrically coupled to each other and not electrically coupled to the first pair of the plurality of conductive connectors, and the processor compares signals from the electrical contacts in the second pair of the plurality of communication connector ports to the normal electrical signal stored in the memory to identify the link down event.
4 . The network security system of claim 3 , wherein a third pair of the plurality of conductive connectors are electrically coupled in the first connector plug and the memory stores the normal electrical signal that includes third pair of the plurality of conductive connectors that are electrically coupled to each other and not electrically coupled to the first pair or the second of the plurality of conductive connectors, and the processor compares signals from the electrical contacts in the third pair of the plurality of communication connector ports to the normal electrical signal stored in the memory to identify the link down event.
5 . The network security system of claim 1 , further comprising:
a communications cable connector plug in a second of the plurality of communication connector ports, the communications cable connector plug having a plurality of communication conductive connectors in contact with the electrical contacts in the second of the plurality of communication connector ports;
wherein the processor is coupled to the electrical contacts in the plurality of communication connector ports and the tamper detection software is adapted to detect the link down event when the communications cable connector plug coupled is removed from the second of the plurality of communication connector ports.
6 . The network security system of claim 5 , wherein the memory stores normal electrical signals from the communications cable connector plug and the processor compares current signals from the communications cable connector plug to the normal electrical signals to identify the link down event.
7 . The network security system of claim 1 , wherein the network access point equipment has a transmitter for transmitting link down event information about the link down event detected by the tamper detection software from the network access point equipment to an administrator computing device.
8 . The network security system of claim 1 , wherein the tamper detection software running on the processor disables the first of the plurality of communication connector ports when the link down event is detected by the tamper detection software.
9 . The network security system of claim 1 , further comprising:
a fuse electrically coupled to the power supply;
wherein the tamper detection software running on the processor increases electrical power applied to the fuse to destroy the fuse when the link down event is detected by the tamper detection software.
10 . The network security system of claim 1 , further comprising:
a thin trace electrically coupled to the power supply;
wherein the tamper detection software running on the processor increases electrical power applied to the fuse to destroy the thin trace when the link down event is detected by the tamper detection software.
11 . A network security system comprising:
a network access point equipment having a processor, a plurality of communication connector ports, electrical contacts in the plurality of communication connector ports, tamper detection software running on the processor of the computer network access point, for detecting a link down event at any of the plurality of communication connector ports and a memory coupled in communication with the processor;
a first connector plug in a first of the plurality of communication connector ports of the network access point equipment, the first connector plug having a plurality of conductive connectors in contact with the electrical contacts in a first port of the plurality of communication connector ports and a first pair of the plurality of conductive connectors in the first connector plug are electrically coupled;
a communications cable connector plug in a second of the plurality of communication connector ports, the communications cable connector plug having a plurality of conductive connectors for transmitting signals to and from the network access point equipment;
wherein the memory stores normal operating signals from the plurality of communication connector ports in the network access point equipment and the tamper detection software compares operating signals from plurality of communication connector ports to the normal operating signals stored in the memory to identify the link down event.
12 . The network security system of claim 11 , further comprising:
a locking cover secured around the communications cable connector plug to prevent removal of the communications cable connector plug from the network access point equipment.
13 . The network security system of claim 11 , wherein the network access point equipment has a transmitter for transmitting link down event information about the link down event detected by the tamper detection software from the network access point equipment to an administrator computing device.
14 . The network security system of claim 11 , wherein the tamper detection software running on the processor disables the first of the plurality of communication connector ports when the link down event is detected by the tamper detection software.
15 . The network security system of claim 11 , further comprising:
a fuse electrically coupled to the power supply;
wherein the tamper detection software running on the processor increases electrical power applied to the fuse to destroy the fuse when the link down event is detected by the tamper detection software.
16 . The network security system of claim 11 , further comprising:
a thin trace electrically coupled to the power supply;
wherein the tamper detection software running on the processor increases electrical power applied to the fuse to destroy the thin trace when the link down event is detected by the tamper detection software.