Wireless local area network access points, end-point communication devices, and computer program products that generate security alerts based on characteristics of interfering signals and/or connection messages

• US 7,929,513 B2
• Filed: 10/30/2006
• Issued: 04/19/2011
• Est. Priority Date: 10/30/2006
• Status: Active Grant

• Current Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Stark, Barbara
• Primary Examiner(s): DESIR, PIERRE LOUIS
• Application Number:
  US11/589,439
• Publication Number:
  US 20080101324A1
• Time in Patent Office: 1,632 Days
• Field of Search: 370/338, 370/469, 370/230, 370/345, 370/332, 370/232, 370/395.2, 726/2, 726/3, 726/4, 726/16, 726/17, 726/21, 726/23, 709/223, 709/224, 455/410
• US Class Current: 370/345
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/125 Protection against power exhaustion attacks
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

A wireless local area network access point (WAP) includes a transceiver, a controller, and a security unit. The transceiver communicates messages with an end-point communication device through a wireless air interface in a defined frequency band. The controller receives through the transceiver a connection request message containing a password from the end-point communication device, authenticates the received password, and responds to the authentication by transmitting through the transceiver to the end-point communication device an encryption key as a connection response message. The security unit generates a security alert based on measured characteristics of one or more received connection request messages and/or based on measured characteristics of interfering signals in the defined frequency band.

Claims

1. A wireless local area network access point comprising:

a transceiver that is configured to communicate messages with an end-point communication device through a wireless air interface in a defined frequency band;

a controller that is configured to receive through the transceiver a connection request message containing a password from the end-point communication device, to authenticate the received password, and to respond to the authentication by transmitting through the transceiver to the end-point communication device an encryption key as a connection response message;

a security unit that is configured to measure a first time between receipt of the connection request message and a subsequent onset of at least one interfering signal having at least a threshold magnitude in the defined frequency band, wherein the security unit is configured to measure a second time between transmission of the connection response message and receipt of the connection response message, and to generate a security alert based on one of the first and second measured times being less than a threshold time, and wherein the security unit is configured to generate a security alert based on detecting at least one disassociation message received from another device that contains an identifier associated with the wireless local area network access point and therefore incorrectly appears to have originated from the wireless local area network access point; and

an interface that is configured to be communicatively connected to the Internet through a broadband modem, wherein the security unit is further configured to communicate information relating to the security alert through the interface to a network management center.

2. The wireless local area network access point of claim 1, wherein:

the security unit is further configured to generate the security alert by generating a visual to a user that indicates that the user should take action to better secure communications by the wireless local area network access point.

3. The wireless local area network access point of claim 1, wherein:

the security unit is further configured to generate the security alert by generating an audible notification to a user that indicates that the user should take action to better secure communications by the wireless local area network access point.

4. The wireless local area network access point of claim 1, wherein:

the controller is further configured to transmit a beacon message that contains information that is indicative of a present connection configuration availability of the wireless local area network access point; and

the security unit is further configured to measure a time between transmission of the beacon message and subsequent onset of at least one interfering signal having at least a threshold magnitude in the defined frequency band, and to generate the security alert based on the measured time being less than a threshold time.

5. The wireless local area network access point of claim 1, wherein the security unit is further configured to communicate information relating to the security alert as at least one of an email message and an instant message through the interface to a defined user destination address.

6. An end-point communication device comprising:

a transceiver that is configured to communicate messages with a wireless local area network access point through a wireless air interface in a defined frequency band;

a controller that is configured to transmit through the transceiver to the wireless local area network access point a connection request message containing a password, to receive a connection response message through the transceiver from the wireless local area network access point that contains an encryption key, and to configure a communication network with the wireless local area network access point in response to the connection response message,

the controller is further configured to transmit the connection request message in response to a pushbutton mode activated by a user selection on a user interface of the end-point communication device; and

a security unit that is configured to measure a time between transmission of the connection request message and a subsequent receipt of the connection response message which is expected to have been generated by a subsequent delayed user initiation of a pushbutton mode by a user selection on a user interface of the wireless local area network access point which initiates transmission of the connection response message from the wireless local area network access point, and to generate a security alert based on the measured time being less than a threshold time, and wherein the security unit is configured to measure a first time between transmission of the connection request message and a subsequent onset of at least one interfering signal having at least a threshold magnitude in the defined frequency band, and that is configured to measure a second time between transmission of the connection response message and subsequent receipt of the connection response message, and to generate the security alert based on one of the first and second measured times being less than a threshold time.

7. The end-point communication device of claim 6, further comprising:

a rewritable non-volatile memory, wherein the security unit is further configured to generate the security alert by recording information relating to the security alert as a user accessible log in the nonvolatile memory.

8. The end-point communication device of claim 6, further comprising:

an interface that is configured to be communicatively connected to the Internet through a modem, wherein the security unit is further configured to communicate information relating to the security alert through the interface and connected Internet to a network management center.

9. The end-point communication device of claim 6, wherein the controller is further configured to generate the security alert in response to receiving a disassociation message.

10. The end-point communication device of claim 9, wherein the controller is further configured to generate the security alert in response to receiving at least a threshold plurality number of disassociation messages within a threshold time.