Method for controlling and calibrating access to a wireless access point

• US 7,953,392 B2
• Filed: 12/19/2006
• Issued: 05/31/2011
• Est. Priority Date: 12/19/2006
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Karstens, Christopher Kent
• Primary Examiner(s): Corsaro; Nick
• Assistant Examiner(s): PLATA, EDD RIANNE L
• Application Number:
  US11/612,820
• Publication Number:
  US 20080148360A1
• Time in Patent Office: 1,624 Days
• Field of Search: 370/252, 455/41.2, 455/410, 455/435.1, 455/435.2, 455/436, 455/443, 455/411, 726/29
• US Class Current: 455/411
• CPC Class Codes: H04J 3/0667 Bidirectional timestamps, e.g. NTP or PTP for compensation of clock drift and for compensation of propagation delays arrangements for monitoring round trip delays in packet switching networks H04L43/0864
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

A computer implemented method and computer program product for controlling a wireless access point range. In one embodiment, the process identifies a distance between the client device and the wireless access point in response to a request by a client device to access the wireless access point. The process allows the client device to access the wireless access point if the distance from the client device to the wireless access point is within the selected access range for the wireless access point.

Claims

1. A computer implemented method for managing access to a wireless access point, the computer implemented method comprising:

receiving a data packet requesting access to a network at the wireless access point from a client device within an actual access range of the wireless access point;

identifying a distance between the client device and the wireless access point based on the data packet received;

responsive to the distance between the client device and the wireless access point being within a selected access range for the wireless access point, transmitting the data packet from the wireless access point to the network;

responsive to the distance between the client device and the wireless access point being beyond the selected access range for the wireless access point, denying the data packet access to the network;

sending a data packet to a calibration client; and

responsive to receiving a reply data packet from the calibration client, identifying the selected access range for the wireless access point based on a difference between a time the data packet was sent to the calibration client and a time the reply data packet was received from the calibration client.

2. The computer implemented method of claim 1 further comprising:

identifying the selected access range for the wireless access point;

receiving the data packet from the client device, wherein the data packet includes a time that the data packet was transmitted to form a transmit clock time; and

identifying an amount of time to transmit the data packet based on a difference between the transmit clock time and a receive time, wherein the receive time is a clock time when a data packet is received.

3. The computer implemented method of claim 2 wherein identifying the distance from the client to the wireless access point based on the transmit time further comprises:

responsive to determining that an amount of time to transmit the data packet from the wireless access point to the client is less than or equal to a time-to-live value, identifying the distance from the client to the wireless access point as a distance within the user selected access range.

4. The computer implemented method of claim 1 wherein the selected access range is less than an actual wireless access range for the wireless access point.

5. The computer implemented method of claim 2 wherein identifying the selected access range further comprises:

sending a data packet to a calibration client with a given time-to-live value; and

responsive to receiving a reply data packet from the calibration client, identifying the given time-to-live value as a time-to-live value that is greater than or equal to a desired time-to-live value, wherein the desired time-to-live value defines the selected access range.

6. The computer implemented method of claim 5 further comprising:

responsive to determining that a reply data packet from the calibration client was not received, sending another data packet to the calibration client with a larger time-to-live.

7. The computer implemented method of claim 2 further comprising:

identifying, by a time stamping unit on an Ethernet card, the receive time, wherein the receive time is a clock time in nanoseconds when a data packet is received.

8. The computer implemented method of claim 1 further comprising:

detecting a set of two or more wireless access points;

transmitting a data packet from the client device to each wireless access point;

identifying a distance between the client and each wireless access point based on an amount of time for the data packet to be transmitted between the client device and each wireless access point; and

sending a request to access a wireless access point in the set of two or more wireless access points that is located at a shortest distance from the client device.

10. The method of claim 1, wherein the data packet includes a time that the data packet was transmitted and wherein identifying the distance between the client device and the wireless access point comprises:

identifying the distance based on a difference between the time the data packet was transmitted and a time the data packet was received at the wireless access point.

9. A computer program product comprising:

a computer usable storage device including computer usable program code for managing access to a wireless access point, the computer program product comprising;

computer usable program code for identifying a distance between a client device and the wireless access point based on a data packet received in response to receiving the data packet requesting access to a network at the wireless access point from the client device within an actual access range of the wireless access point;

computer usable program code for transmitting the data packet from the wireless access point to the network in response to the distance between the client device and the wireless access point being within a selected access range for the wireless access point;

computer usable program code for denying the data packet access to the network in response to the distance between the client device and the wireless access point being beyond the selected access range for the wireless access point;

computer usable program code for sending a data packet to a calibration client; and

computer usable program code for identifying the selected access range for the wireless access point based on a difference between a time the data packet was sent to the calibration client and a time a reply data packet was received from the calibration client in response to receiving the reply data packet from the calibration client.

11. The computer program product of claim 9, wherein the data packet includes a time that the data packet was transmitted and wherein the computer usable program code for identifying the distance between the client device and the wireless access point comprises computer usable program code for identifying the distance based on a difference between the time the data packet was transmitted and a time the data packet was received at the wireless access point.