Wireless security using media access control address filtering with user interface

• US 20060236376A1
• Filed: 04/01/2005
• Published: 10/19/2006
• Est. Priority Date: 04/01/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Chang, Sheng-Chiao, Liu, Calvin Y.
• Granted Patent: US 7,496,754 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An improved system, apparatus, and method for securing a network using MAC address filtering is provided. Advantageously, the present invention does not require that a client computer be powered on, and instead provides an efficient user interface for displaying a requestor'"'"'s MAC address and for allowing or denying the device with an associated MAC address access to the network. Parameters per allowed MAC address may also be provided.

Claims

1. A wireless security apparatus, comprising:

a transceiver for detecting a wireless signal originating from a device having a media access control (MAC) address, the wireless signal requesting access to a network;

a processor operably coupled to the transceiver;

a user interface operably coupled to the processor for displaying the MAC address and for allowing or denying the device access to the network; and

a memory coupled to the processor for storing the MAC address to create a list of MAC addresses that are allowed access to the network.

2. The apparatus of claim 1, wherein the user interface allows for setting of a parameter per MAC address stored in the memory.

3. The apparatus of claim 2, wherein the parameter is selected from the group consisting of an expiration time, an expiration date, and an identification reference.

4. The apparatus of claim 1, wherein the user interface allows for entering of a wireless equivalent privacy (WEP) or WiFi protected access (WPA) key.

5. The apparatus of claim 1, wherein the user interface includes at least one light emitting diode for indicating MAC address filtering functionality.

6. The apparatus of claim 1, wherein the memory further includes a list of MAC addresses that are denied access to the network.

7. The apparatus of claim 1, further comprising a local area network (LAN) connector including a 10/100 Ethernet RJ45 port.

8. The apparatus of claim 1, further comprising a port for receiving a storage device that includes a list of MAC addresses to be allowed or denied access to the network.

9. A wireless security apparatus, comprising:

means for detecting a wireless signal originating from a device having a media access control (MAC) address, the wireless signal requesting access to a network;

means for processing data operably coupled to the means for detecting;

means for displaying the MAC address and for allowing or denying the device access to the network, the means for displaying and for allowing or denying being operably coupled to the means for processing; and

means for storing the MAC address to create a list of MAC addresses that are allowed access to the network.

10. A wireless security system, comprising:

a network;

an access point operably coupled to the network; and

a security apparatus operably coupled to the access point, the security apparatus including;

a transceiver for detecting a wireless signal originating from a device having a media access control (MAC) address, the signal requesting access to the network;

a processor operably coupled to the transceiver;

a user interface operably coupled to the processor for displaying the MAC address and for allowing or denying the device access to the network; and

a memory coupled to the processor for storing the MAC address to create a list of MAC addresses that are allowed access to the network.

11. A method of securing a network, the method comprising:

detecting a request for access to a network by a device having a media access control (MAC) address;

displaying the MAC address;

receiving information indicating whether the device should be granted or denied permission to access the network; and

storing the MAC address in a memory to control access to the network.

12. The method of claim 11, wherein the information is provided via a user interface.

13. The method of claim 11, further comprising setting a parameter per MAC address granted access to the network.

14. The method of claim 13, wherein the parameter is selected from the group consisting of an expiration time, an expiration date, and an identification reference.

15. The method of claim 11, further comprising transferring a predetermined list of MAC addresses to a wireless security apparatus.

16. The method of claim 11, further comprising storing the MAC address in the memory to create a list of MAC addresses that are allowed access to the network.

17. The method of claim 11, further comprising storing the MAC address in the memory to create a list of MAC addresses that are denied access to the network.