Location aware wireless security

• US 20070087763A1
• Filed: 10/18/2005
• Published: 04/19/2007
• Est. Priority Date: 10/18/2005
• Status: Abandoned Application

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Huseth, Steve, Budampati, Ramakrishna, Kune, Denis
• Application Number:
  US11/252,434
• Publication Number:
  US 20070087763A1
• Time in Patent Office: Days
• US Class Current: 455/456.500
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A secure wireless network system includes one or more wireless receivers that receive communications from wireless devices. The wireless receivers, or access points, include sensors that detect the location of a wireless device sending communications to the wireless receiver. A controller rejects access to the wireless network by a wireless device as a function of the location of the wireless device. In further embodiments, security information is combined with location information to form events. The events are correlated with known access attempt patterns to control access to the network.

Claims

1. A wireless network system comprising:

a wireless receiver that receives communications from wireless devices;

a sensor that detects the location of a wireless device sending communications to the wireless receiver; and

a controller coupled to the detector that rejects access to the wireless network by a wireless device as a function of the location of the wireless device.

2. The wireless network system of claim 1 and further comprising multiple wireless receivers and sensors.

3. The wireless network system of claim 2 wherein location of a wireless device is a function of information obtained from multiple sensors.

4. The wireless network system of claim 3 wherein the location of a wireless device is determined by at least one of time difference of arrival, received signal strength and angle of arrival.

5. The wireless network system of claim 4 wherein a neural network is used to determine the location of a wireless device.

6. The wireless network system of claim 1 and further comprising means for employing countermeasures in response to unauthorized wireless devices.

7. The wireless network system of claim 1 and further comprising a map of physical space representing authorized areas, and wherein access is rejected if the wireless device is outside an authorized area.

8. The wireless network system of claim 1 and further comprising cyber security sensors that provide information about wireless devices attempting to access the network.

9. The wireless network system of claim 8 wherein the cyber security sensors provide information selected from the group consisting of MAC address, timestamp, time span, traffic patterns, and exploitation attempts.

10. A wireless network system comprising:

a wireless receiver that receives communications from wireless devices;

a detector that detects the location of a wireless device sending communications to the wireless receiver;

an event generator that generates events including location information;

a pattern matcher that matches generated events with known intrusion patterns; and

a controller coupled to the detector that controls access to the wireless network by a wireless device as a function of the matches.

11. The wireless network system of claim 10, wherein the event generator generates events that additionally includes security information about wireless devices attempting to access the network.

12. The wireless network system of claim 11 wherein the security information is selected from the group consisting of MAC address, timestamp, time span, traffic patterns, and exploitation attempts.

13. The wireless network system of claim 10 wherein location of a wireless device is a function of information obtained from multiple detectors.

14. The wireless network system of claim 13 wherein the location of a wireless device is determined by at least one of time difference of arrival, received signal strength and angle of arrival as detected from the multiple detectors.

15. The wireless network system of claim 10 and further comprising a dynamic intrusion reference model coupled to the pattern matcher for providing the known intrusion patterns.

16. The wireless network system of claim 10 and further comprising a map of physical space representing authorized areas.

17. A method of controlling access to a wireless network, the method comprising:

detecting a network access attempt by a wireless client device;

determining the location of the wireless client device; and

rejecting access by the wireless client device as a function of the location of the wireless client device.

18. The method of claim 17 wherein the access is also rejected as a function of security information related to the wireless client device.

19. The method of claim 17 wherein the security information is selected from the group consisting of MAC address, timestamp, time span, traffic patterns, and exploitation attempts.

20. The method of claim 17 wherein location of a wireless device is a function of information obtained from multiple location sensors.

21. The method of claim 17 wherein the location of a wireless device is determined by at least one of time difference of arrival, received signal strength and angle of arrival as detected from the multiple location sensors.