Distributed wireless security system

• US 20070291945A1
• Filed: 06/15/2006
• Published: 12/20/2007
• Est. Priority Date: 06/15/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Lee, Hsiu-Ling, Chuang, Che-Ming, Tung, Carl, Huang, Kung-Shiuh
• Granted Patent: US 9,363,675 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/125 Protection against power exhaustion attacks
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning

Abstract

A low-cost security management system for a wireless network utilizes client software having one component that runs on trusted access points and another that runs on wireless client cards on a client PC and/or laptop that enables an administrator to log in and check the status of network security from any client pc. The software monitors the state of the wireless network and reports on unauthorized connections or hacking attack, denial of service attack and potential threats to the security of the network.

Claims

1. A wireless client card for use with a wireless client in a network for maintaining wireless network security, the card comprising:

a processor; and

a computer readable memory, wherein the memory stores instructions which, when executed, cause the processor to perform the operations of;

setting up a data base containing profile information from all clients within range of said wireless client;

sharing files and messages with a network access point according to an agreed protocol, wherein a portion of said files includes policies and rules for implementing wireless intrusion detection;

transmitting said files to said access point;

monitoring said network to detect intrusion;

notifying said access point upon detecting an intrusion; and

updating said data base in response to messages exchanged with said access point.

2. The wireless client card according to claim 1 wherein one or more additional access points are located within the network and said card detects the additional access points within range of the network.

3. The wireless client card according to claim 2 wherein said card collects profile information from each detected access point.

4. The wireless client card according to claim 3 wherein said card detects a condition justifying an alert and sends an alert to an access point via https protocol.

5. The wireless client card according to claim 4 wherein said card retrieves an alert log from an access point via https protocol.

6. A wireless access point for maintaining wireless network security, comprising:

means for receiving from a wireless client policies and rules for implementing wireless intrusion detection;

means for exchanging said policies and rules over a secure link with other access points; and

means for notifying all wireless client within range when an intrusion has been detected.

7. The wireless access point according to claim 6 further comprising means for monitoring said network according to the policy rules received from a wireless client.

8. The wireless access point according to claim 7 further comprising a memory for maintaining security alarm information.

9. The wireless access point according to claim 8 further comprising means for responding to a request from a wireless client to provide detailed alarm information.

10. The wireless access point according to claim 6 further comprising means for sharing an alert with other access points using IAPP protocol.

11. A wireless client programmed to administer network security, the client comprising:

a processor; and

a computer readable memory, wherein the memory stores instructions which, when executed, cause the processor to perform the operations of;

setting up an internal data base containing profile information from all access points within range of said wireless client;

configuring security policy violation rules;

obtaining from an access point a message indicating a violation of said security policy violation rules; and

updating said data base in response to said message.

12. The wireless client according to claim 11, wherein the client is programmed to scan for access points and to send a message to an associated access point when a new access point is detected.

13. A wireless access point comprising:

a processor; and

a computer readable memory configured to store instructions for executing, by the processor, a method of administering a wireless network, the instructions comprising;

setting up on a wireless client a data base containing profile information of all other wireless clients and access points within range of the network;

determining which of said clients and access points are trusted; and

communicating with at least one trusted one of said access points at least a portion of said data base.

14. A wireless access point comprising:

a processor; and

a computer readable memory configured to store instructions for executing, by the processor, a method of administering a wireless network, the instructions comprising;

executing a method of administering a wireless network

storing in a database on said access point security violation rules and communications protocols from a wireless client, said data base identifying trusted ones of said wireless clients;

scanning all wireless clients within range; and

creating a log when a wireless client not listed in said data base is detected.

15. The wireless access point according to claim 14 wherein said wireless access point notifies trusted ones of said clients of the existence of said created log.

16. The wireless access point according to claim 14 wherein said wireless access point is programmed to communicate said data base to at least one other access point over a secure connection.

17. The wireless access point according to claim 15 wherein said secure connection employs the IAPP protocol.

18. The wireless access point according to claim 15 wherein said wireless access point notifies trusted ones of said clients by first sending an alert to all trusted ones of said clients.

19. The wireless access point according to claim 17 wherein said access point responds to the receipt of a request from an alerted one of said wireless clients to transmit said log to said alerted one of said clients.

20. The wireless access point according to claim 19 wherein the transmission of said log is by https protocol.