Signal fingerprinting for authentication of communicating devices

• US 10,582,384 B2
• Filed: 01/12/2018
• Issued: 03/03/2020
• Est. Priority Date: 06/09/2015
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Gross, David, Lackey, Joshua, Levy, Donald E., Piqueras Jover, Roger, Ramachandran, Jayaraman, Serban, Cristina
• Primary Examiner(s): Heiber, Shantell L
• Application Number:
  US15/870,330
• Publication Number:
  US 20180139610A1
• Time in Patent Office: 781 Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Aspects of the subject disclosure may include, for example, receiving electromagnetic waves at a physical interface of a transmission medium that propagate along the transmission medium without requiring an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, and wherein the electromagnetic waves have a non-optical frequency range. A determination is made as to whether the electromagnetic waves are being received from a second network device according to a comparison of a fingerprint of the electromagnetic waves and an expected fingerprint of expected parameters for the electromagnetic waves transmitted by the second network device. Other embodiments are disclosed.

Claims

1. A method comprising:

receiving, by a waveguide system, electromagnetic waves at a physical interface of a transmission medium that propagate along the transmission medium without requiring an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, and wherein the electromagnetic waves have a non-optical frequency range;

determining, by the waveguide system, whether the electromagnetic waves are being received from a second network device according to a comparison of a fingerprint of the electromagnetic waves and an expected fingerprint of expected parameters for the electromagnetic waves transmitted by the second network device; and

determining, by the waveguide system, whether the electromagnetic waves are being received over a path that includes a group of third network devices according to the fingerprint of the electromagnetic waves and according to a group of expected fingerprints of expected parameters for other electromagnetic waves transmitted by the group of third network devices.

2. The method of claim 1, wherein the determining whether the electromagnetic waves are being received from the second network device further comprises:

accessing, by the waveguide system, a profile associated with the second network device, the profile including the expected fingerprint of the expected parameters for the electromagnetic waves transmitted by the second network device.

3. The method of claim 2, further comprising:

receiving, by the waveguide system from a server, the profile associated with the second network device.

4. The method of claim 2, wherein the expected parameters include frequency parameters, amplitude parameters, phase parameters, guided wave metrics, a wave mode, or a combination thereof.

5. The method of claim 1, wherein the determining of whether the electromagnetic waves are being received from the second network device is performed by the waveguide system.

6. The method of claim 1, further comprising measuring, by the waveguide system, parameters of the electromagnetic waves to generate the fingerprint of the electromagnetic waves.

7. The method of claim 1, further comprising:

responsive to the comparison of the fingerprint with the expected fingerprint indicating a difference, requesting, by the waveguide system, an authentication of the second network device; and

responsive to the second network device being authenticated according to the authentication, receiving, by the waveguide system from a server, a revised profile associated with the second network device, the revised profile including a revised expected fingerprint of revised expected parameters for the electromagnetic waves transmitted by the second network device.

8. The method of claim 7, further comprising storing the revised profile in a memory of the waveguide system.

9. A device comprising:

a processing system including a processor; and

a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising;

accessing a profile including an expected fingerprint of expected parameters based on reflected signals associated with a transmission having a non-optical frequency range, wherein the transmission is guided along a transmission medium of a network path without requiring an electrical return path;

comparing a fingerprint with the expected fingerprint, wherein the fingerprint is generated from parameters based on measurements of a reflected signal;

determining a device topology along at least a portion of the transmission medium of the network path according to the comparing, wherein the reflected signal is associated with a test signal transmitted to a second communication device along the transmission medium of the network path, and wherein the profile is associated with the second communication device; and

determining whether the reflected signals are being received over a path that includes a group of third network devices according to the fingerprint and according to a group of expected fingerprints of expected parameters for other reflected signals according to the group of third network devices.

10. The device of claim 9, wherein the reflected signal is associated with a transmission of electromagnetic waves at a physical interface of the transmission medium.

11. The device of claim 9, wherein the operations further comprise:

receiving the reflected signal;

measuring the parameters of the reflected signal; and

generating the fingerprint of the reflected signal according to the parameters.

12. The device of claim 9, wherein the determining of the device topology comprises:

determining a difference between the fingerprint and the expected fingerprint according to the comparing.

13. The device of claim 9, the operations further comprising, responsive to the comparing of the fingerprint with the expected fingerprint indicating a difference, requesting an authentication of the second communication device.

14. The device of claim 13, wherein the determining of the device topology comprises:

responsive to an authentication failure by the second communication device, determining that the second communication device is an unauthorized device along the transmission medium of the network path.

15. The device of claim 13, wherein the operations further comprise:

responsive to the second communication device being authenticated according to the authentication, receiving a revised profile including a revised expected fingerprint of revised expected parameters for reflected signals associated with the transmission along the transmission medium of the network path; and

storing the revised profile in the memory.

16. A non-transitory, machine-readable storage medium comprising instructions, which when executed by a processor of a first network device cause the processor to perform operations comprising:

accessing a profile including an expected fingerprint of expected parameters based on received signals associated with a transmission having a non-optical frequency range, wherein the transmission is guided along a transmission medium of a network path between network devices, without requiring an electrical return path;

comparing a fingerprint with the expected fingerprint to obtain a comparison, wherein the fingerprint is generated from parameters based on measurements of a signal;

determining whether the received signals originate from a second network device based on the comparison; and

determining whether the received signals are being received over a path that includes a group of third network devices according to the fingerprint and according to a group of expected fingerprints of expected parameters for other received signals according to the group of third network devices.

17. The non-transitory, machine-readable storage medium of claim 16, wherein the signal comprises electromagnetic waves received at a physical interface of the transmission medium.

18. The non-transitory, machine-readable storage medium of claim 16, wherein the operations further comprise:

receiving the signal along the network path;

measuring the parameters of the signal; and

generating the fingerprint of the signal according to the parameters.

19. The non-transitory, machine-readable storage medium of claim 16, the operations further comprising:

responsive to the comparing of the fingerprint with the expected fingerprint indicating a difference, receiving a revised profile including a revised expected fingerprint of revised expected parameters; and

storing the revised profile in a memory.

20. The non-transitory, machine-readable storage medium of claim 16, the operations further comprising authenticating a network device along the network path associated with transmitting of the signal according to the comparing.