System and method of restricting access to wireless local area network based on client location

• US 20040267551A1
• Filed: 06/26/2003
• Published: 12/30/2004
• Est. Priority Date: 06/26/2003
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Yadav, Satyendra
• Application Number:
  US10/603,801
• Publication Number:
  US 20040267551A1
• Time in Patent Office: Days
• US Class Current: 455/456.1
• CPC Class Codes: G06Q 10/06375 Prediction of business process outcome or impact based on a proposed change
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A system and method for restricting access to a wireless local area network by a client based on the location of such client, such that access is denied or withdrawn to a client who is outside of such permitted area.

Claims

1. A method comprising determining whether to grant a client access to a wireless local area network based on a location of said client.

2. A method as in claim 1, comprising determining whether to withdraw said access from said client based on the location of said client.

3. A method as in claim 1, comprising receiving information available from signals broadcast by said client to determine the location of said client.

4. A method as in claim 1, comprising receiving signals from two or more signal receivers to determine the location of said client.

5. A method as in claim 4, wherein receiving signals by two or more signal receivers to determine the location of said client comprises receiving signals by an access point and a signal receiver whose location is known.

6. A method as in claim 1, comprising determining a direction of a source of a signal received from said client;

and

using said direction to determine the location of said client.

7. A method as in claim 1, comprising determining a location fingerprint of a signal received from said client;

and

using said location fingerprint to determine a location of said client.

8. A method as in claim 1, comprising receiving signals from three or more signal receivers;

triangulating said signals; and

using said triangulated signals to determine the location of said client.

9. A method as in claim 1, comprising defining boundaries of a permitted area.

10. A method as in claim 9, comprising storing coordinates of said boundary in a policy server.

11. A method as in claim 9, comprising recording instances of attempts to gain access to said wireless local area network from outside said boundary.

12. A method as in claim 11, comprising issuing an alert upon an attempt to access said wireless local area network from outside said boundary.

13. A method as in claim 9, comprising implementing intrusion reaction measures upon an attempt to access said wireless local area network from outside said boundary.

14. A method as in claim 1, comprising accepting signals from a signal receiver of a signal receiver pair.

15. A system comprising:

a signal receiver to determine a location of a client relative to a permitted area; and

a processor to withhold access of said client to said wireless local area network if said client is outside of said permitted area.

16. A system as in claim 15, wherein said processor is to withdraw access to said wireless local area network from said client if said client is outside of said permitted area.

17. A system as in claim 15, wherein said signal receiver is to use information from a signal broadcast by said client to determine said location of said client.

18. A system as in claim 15, comprising two signal receivers, wherein one of said two signal receivers is an access point, and another of said signal receivers includes a wireless component whose location is known.

19. A system as in claim 15, wherein said signal receiver is to use a direction of the source of a signal received from said client to determine the location of said client.

20. A system as in claim 15, wherein said signal receiver is to use a location fingerprint of a signal received from said client to determine the location of said client.

21. A system as in claim 15, comprising a data storage component to record instances of attempts to gain access to said wireless local area network area from outside of said permitted area.

22. A system as in claim 15, comprising an alert unit to issue an alert of attempts to gain access to said wireless local area network area from outside of said permitted area.

23. A system as in claim 15, wherein said signal receiver is a signal receiver of a signal receiver pair.

24. A system as in claim 15, comprising a policy server to store data on boundaries of said permitted area.

25. A computer system comprising:

an access point;

a processor to restrict access of a client to a wireless local area network based upon location of a client; and

a security unit to issue an alert upon access attempts from outside a permitted area.

26. A computer system as in claim 25, including a policy server to store coordinates of a permitted area.

27. A computer system as in claim 26, including a memory.

28. An article comprising:

a storage medium, having stored thereon instructions, that when executed, results in the restriction of access of a client to a wireless local area network based upon the location of said client.

29. An article as in claim 28, comprising instructions to determine the location of said client.

30. An article as in claim 28, comprising instructions to issue an alert upon access attempts from outside a permitted area.