Methods, apparatuses and systems facilitating management of airspace in wireless computer network environments

• US 7,295,524 B1
• Filed: 02/18/2003
• Issued: 11/13/2007
• Est. Priority Date: 02/18/2003
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: AirWave Wireless, Inc. (Hewlett-Packard Enterprise Company)
• Inventors: Luther, Jason Edward, Gray, Gordon Paul, Augustino, Daniel Thomas
• Primary Examiner(s): Nguyen; Chau
• Assistant Examiner(s): PARK, JUNG H
• Application Number:
  US10/368,152
• Time in Patent Office: 1,729 Days
• Field of Search: None
• US Class Current: 370/254
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 5/0058 Allocation criteria
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 24/10 Scheduling measurement reports ; Arrangements for measurement reports
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Methods, apparatuses and systems facilitating the management of wireless computer network environments and the detection of rogue and other devices that may affect the performance and/or security of the wireless computer network. The present invention enables accurate and cost effective WLAN airspace mapping. In one embodiment, the present invention allows any conforming access point the ability to routinely scan its airspace, collect data on all operating frequencies and report this information back to a management platform. In one embodiment, the management and reporting functionality described herein uses a standards-based vehicle, such as Simple Network Management Protocol (SNMP). In one embodiment, the present invention allows for detection of all wireless traffic within or affecting an enterprise'"'"'s computer network environment, picking up all active access points (Ad Hoc or Infrastructure) and all wireless clients data regardless of SSID, channel, or security settings. The management platform, according to an embodiment of the present invention, analyzes information received from the access points under management to detect and report the state of the computer network environment. In one embodiment, the present invention facilitates isolation of rogue wireless devices affecting the computer network environment and effective decision-making as to management of the detected device. The present invention also allows network administrators to optimize the configuration of the wireless network environment for performance and security.

Claims

1. A system facilitating the management of airspace associated with wireless computer network environments, comprising

an airspace management platform operably connected to a computer network, wherein the airspace management platform is operative to:

transmit requests for scans to wireless access points registered with the airspace management platform,

receive, from the wireless access points, scan data characterizing detected wireless traffic, and

analyze the data to identify rogue wireless devices; and

at least one wireless access point operably connected to the computer network,

wherein the at least one wireless access point includes wireless communications functionality allowing for wireless communication with at least one wireless client device;

wherein the at least one wireless access point further includes scanning functionality operative to detect wireless traffic on at least one frequency channel;

wherein the airspace management platform further comprises an ignored access point table including information relating to previously detected access points; and

wherein the airspace management platform is operative to process scan data against the ignored access point table to identify rogue devices; and

wherein the at least one wireless access point comprises a scanning agent operative, in response to a request from the airspace management platform, to;

scan for wireless traffic;

record scan data characterizing the detected wireless traffic, and

transmit the scan data to the airspace management platform.

2. The system of claim 1 wherein the computer network is a local area computer network.

3. The system of claim 1 wherein the computer network is a wide area computer network.

4. The system of claim 1 wherein the scanning agent is operative to scan for wireless traffic on a plurality of frequency channels.

5. The system of claim 1 wherein the wireless traffic comprises a plurality of packets;

and wherein the scanning agent is operative to parse the information in the packets, and transmit the packet information to the airspace management platform.

6. The system of claim 1 wherein that at least one wireless access point further comprises a management information base having an interface;

and wherein the functionality of the scanning agent and the scan data is accessible through the interface.

7. The system of claim 6 wherein the interface is an SNMP interface.

8. The system of claim 7 wherein the at least one network access point is operative to transmit scan data in SNMP traps.

9. The system of claim 8 wherein scan data corresponding to a given detected device is transmitted in a separate SNMP trap.

10. The system of claim 8 wherein the airspace management platform is operative to process the SNMP traps to detect rogue devices.

11. The system of claim 1 wherein the airspace management platform comprises an access point table including information relating to registered access points;

and wherein the airspace management platform is operative to process scan data against the access point table to identify rogue devices.

12. The system of claim 1 wherein the airspace management platform is operative to identify changes to an access point in the ignored access point table by comparing the scan data corresponding to the access point to the information in the ignored access point table.

13. The system of claim 12 wherein the airspace management platform is operative to issue a notification upon the detection of a change to an ignored access point.

14. The system of claim 1 wherein the airspace management platform is operative to issue a notification upon the detection of a rogue access point.