WIRELESS PERIMETER SECURITY DEVICE AND NETWORK USING SAME

• US 20110280235A1
• Filed: 05/23/2011
• Published: 11/17/2011
• Est. Priority Date: 09/22/2003
• Status: Active Grant

• Current Assignee: Callahan Cellular LLC (Intellectual Ventures LLC)
• Original Assignee: Bella Tosso AG LLC (Intellectual Ventures LLC)
• Inventors: Tiwari, Sameer
• Granted Patent: US 8,498,419 B2
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: H04K 2203/18 for wireless local area networks or WLAN
• CPC Class Codes: H04K 2203/32 including a particular configuration of antennas
• CPC Class Codes: H04K 2203/34 involving multiple cooperating jammers
• CPC Class Codes: H04K 3/43 characterized by the control of the jamming power, signal-to-noise ratio or geographic coverage area
• CPC Class Codes: H04K 3/45 characterized by including monitoring of the target or target signal, e.g. in reactive jammers or follower jammers for example by means of an alternation of jamming phases and monitoring phases, called "look-through mode"
• CPC Class Codes: H04K 3/46 characterized in that the jamming signal is produced by retransmitting a received signal, after delay or processing
• CPC Class Codes: H04K 3/825 by jamming
• CPC Class Codes: H04K 3/86 related to preventing deceptive jamming or unauthorized interrogation or access, e.g. WLAN access or RFID reading record carriers with integrated circuit chips including means for preventing undesired reading or writing from or to record carriers by hindering electromagnetic reading or writing G06K19/07318; arrangements for sensing record carriers including arrangements for protecting the interrogation against piracy attacks G06K7/10257
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A Radio Frequency based security system for providing security for wireless Local Area Networks (WLAN) that allows the creation and maintenance of arbitrarily shaped secure wireless access areas with boundaries around said wireless Local Area Network and prevents access to the said wireless LAN from outside the perimeter of the secure area. The system includes a plurality of perimeter Radio Frequency Sentry Devices (RFSDs) that are employed to establish the boundaries of said secure area around said wireless LAN. The wireless LAN being secured may be an industry standard IEEE 802.11a, 801.11b or 802.11g based wireless LAN or any other wireless LAN that uses packet based communication protocols. The said RFSDs may be stand-alone devices or they may be connected to a wired or wireless Local Area Network.

Claims

1. A method for determining placement of radio frequency security devices (RFSDs) within a secured space to create a perimeter for primary devices of a wireless local area network (WLAN) within said secured space and to reduce detection of transmitted packets that go on an excursion from said WLAN to external networks, said method comprising:

determining a radio frequency map of a network environment;

determining signal strength of an external network;

determining signal strength of the WLAN;

comparing the determined signal strengths;

determining radiation patterns; and

based on said compared signal strengths and said determined radiation patterns, adjusting antenna systems of each RFSD to cloak or sanitize an affected packet in response to one of a packet emitted from said WLAN or a packet emitted from said external network, which approaches and traverses said perimeter.

2. The method of claim 1, further comprising:

identifying one or more external wireless networks to the WLAN;

identifying said external wireless networks with respect to proximity of location to said perimeter of the WLAN;

identifying signal strength of said one or more identified external wireless networks; and

arranging antenna systems of predetermined RFSDs to cause wireless traffic of said one or more external wireless networks to be undetectable by the WLAN.

3. The method of claim 1, further comprising:

identifying one or more external wireless networks to the WLAN;

identifying said external wireless networks with respect to proximity of location to said perimeter of the WLAN;

identifying signal strength of said one or more identified external wireless networks; and

arranging antenna systems of predetermined RFSDs to cause wireless traffic of the WLAN to be undetectable by said one or more external wireless networks.

4. The method of claim 1, further comprising:

identifying one or more external wireless networks to the WLAN;

identifying said external wireless networks with respect to proximity of location to said perimeter of the WLAN;

identifying signal strength of said one or more identified external wireless networks;

arranging antenna systems of predetermined RFSDs to cause wireless traffic of an identified affected packet to be undetectable in relation to its trajectory across an edge said of said perimeter; and

re-evaluating signal strength in response to said antenna arrangement.

5. The method of claim 4 wherein said secured space further comprises a central controller (CC) unit in communication with each of said RFSDs and having:

a control authority containing knowledge of said primary and of secondary devices;

a central registry, where each of said RFSDs can respectively register themselves with the CC unit; and

a switchable communications means for enabling communication between each of said RFSDs and said CC unit.

6. The method of claim 5 wherein communication between said CC unit and each RFSD is bidirectional.

7. The method of claim 5 wherein said RFSDs comprise a transmission means for transmitting data across the WLAN and a LAN, a receiver means for receiving data across the WLAN and the LAN, a controller means for controlling the RFSDs, respectively, across the WLAN and the LAN, a power means for powering said RFSDs singly or collectively, and a directionally steerable communication means for enabling effective communications of RFSDs across the WLAN and the LAN.

8. The method of claim 7 wherein each RFSD comprises:

an antenna system which has a capability to determine signal strength comparisons at high speeds and wherein each RFSD is configured to;

determine time of difference of arrival (TDOA) comparisons at high speeds; and

determine phase difference measurements at high speeds.

9. The method of claim 8 wherein each antenna system comprises:

a plurality of directional antennas facing in a same direction.

10. The method of claim 9 wherein said antennas are of types that include parabolic, yagi, patch, quad, bi-quad, dish, collinear, vertical, dipole, and phased array.

11. The method of claim 10, further comprising:

tuning said secured space by using at least one of said RFSDs to transmit a first signal to another of said RFSDs so as to enable others of said RFSDs receive transmission of said first signal to determine radio frequency characteristics of said secured space and any of said external wireless networks.

12. The method of claim 11 wherein at least one of said RFSDs includes a radio frequency detection unit (RDF).

13. The method of claim 12, further comprising identifying a packet from an external wireless network approaching said perimeter.

14. The method of claim 13 wherein said affected packet is transmitted towards said WLAN.

15. The method of claim 13 wherein said affected packet is transmitted away from said WLAN.

16. The method of claim 15 wherein said perimeter is equivalent to an area of one or more floors of a building or locale.

17. The method of claim 16 wherein said WLAN is one of a x.25 or IEEE 802.11 protocol network.

18. The method of claim 17 wherein at least one of said RFSDs has a directional, steerable antenna.

19. A security-enhanced wireless communications system, comprising:

one or more primary wireless devices forming part of wireless local area network (WLAN), and capable of communication at least in part by wireless packets; and

a communications security device (CSD) for each edge of a perimeter of a locale, wherein each CSD is optimally placed along a respective said edge to create said perimeter for said primary devices of the WLAN and to reduce detection of transmitted packets that go on an excursion from said WLAN to external networks, said system operative to;

determine signal strength of the external networks;

determine signal strength of the WLAN;

compare signal strengths;

determine radiation patterns; and

based on said compared signal strengths and said determined radiation patterns, adjust antenna systems of each CSD to cloak or sanitize an affected packet.

20. A security-enhanced wireless communications system, comprising:

two or more primary wireless devices forming a wireless local area network (WLAN) and configured to operatively communicate using wireless packets, the WLAN having two or more radio frequency security devices (RFSDs), each of which is positioned along an edge of a perimeter of a secured space and each of which is capable to affect packet traffic from the WLAN or from an external network, said system being configured to operatively affect said external network packet traffic by being configured to;

create a radio frequency map of an environment of the WLAN and the external network;

identify one or more external wireless networks to the WLAN;

identify said external wireless networks with respect to proximity of location to said perimeter;

identify signal strength of said one or more identified external wireless networks;

re-position one or more of said RFSDs along an edge of said perimeter of the secured space in response to the identified signal strength;

identify packet characteristics of an affected packet;

adjust one or more of said RFSDs to respond and transmit at least one altered packet having similar characteristics of said affected packet; and

transmit said altered packet towards or away from said WLAN in response to a traversing direction of said affected packet so as to cause said affected packet to be undetectable.