System and method for wireless network and physical system integration

• US 8,627,470 B2
• Filed: 11/13/2007
• Issued: 01/07/2014
• Est. Priority Date: 11/13/2007
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Krischer, Mark, King, Simon
• Primary Examiner(s): Desrosiers, Evans
• Application Number:
  US11/939,355
• Publication Number:
  US 20090125981A1
• Time in Patent Office: 2,247 Days
• Field of Search: 726 22- 25, 713187-188, 713193-194
• US Class Current: 726/23
• CPC Class Codes: G08B 13/19608 Tracking movement of a target, e.g. by detecting an object predefined as a target, using target direction and or velocity to predict its new position
• CPC Class Codes: G08B 13/19645 Multiple cameras, each having view on one of a plurality of scenes, e.g. multiple cameras for multi-room surveillance or for tracking an object by view hand-over
• CPC Class Codes: G08B 13/19697 Arrangements wherein non-video detectors generate an alarm themselves
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

In one embodiment, an apparatus includes an intrusion detection arrangement and a location identification arrangement. The intrusion detection arrangement determines when a client without authorization attempts to access a wireless network of which the intrusion detection arrangement is a part. The location identification arrangement identifies at least a first approximate physical location of the client without authorization when the client without authorization attempts to access the wireless network. The location identification arrangement is configured to communicate the first approximate physical location to a surveillance arrangement which monitors the first approximate physical location.

Claims

1. An apparatus comprising:

an intrusion detection arrangement embodied on a tangible, non-transitory computer-readable medium, the intrusion detection arrangement being arranged to determine when a client without authorization attempts to access a wireless network, wherein the intrusion detection arrangement is associated with the wireless network; and

a location identification arrangement embodied on the tangible, non-transitory computer-readable medium, the location identification arrangement being arranged to identify at least a first approximate physical location of the client without authorization when the client without authorization attempts to access the wireless network, wherein the location identification arrangement is arranged to transform information obtained from the intrusion detection arrangement into the first approximately physical location and to identify a surveillance system to monitor the first approximately physical location from a plurality of potential surveillance systems, and wherein the location identification arrangement is configured to communicate the first approximate physical location to the surveillance arrangement that is arranged to monitor the first approximate physical location, and wherein the location identification arrangement is further configured to determine if the client without authorization has moved and, if the client without authorization has moved, the location identification arrangement is still further configured to identify a second approximate physical location of the client without authorization and to communicate information associated with the second approximate physical location to the surveillance arrangement.

2. The apparatus of claim 1 further including:

communicate the first approximate physical location to the surveillance device by sending the first approximate physical location over the port arrangement.

3. The apparatus of claim 1 wherein the location identification arrangement is further configured to communicate the first approximate physical location to an Internet Protocol interoperability and collaboration system.

4. The apparatus of claim 1 wherein the intrusion detection arrangement has an associated physical range, wherein the intrusion detection arrangement is arranged to determine when the client without authorization attempts to access the wireless network by determining when the client without authorization is present in the associated physical range.

5. A method comprising:

determining when a client device attempts to gain unauthorized access to a wireless network;

identifying a first approximate physical location at which the client device is located if it is determined that the client device attempts to gain unauthorized access to the wireless network;

providing information associated with the first approximate physical location to a surveillance system, wherein the surveillance system is configured to observe at least the first approximate physical location;

determining if the client device continues to be located at the first approximate physical location, wherein determining if the client device continues to be located at the first approximate physical location includes determining if the client device changes from attempting to gain unauthorized access to the wireless network through a first access point to attempting to gain unauthorized access to the wireless network through a second access point;

identifying a second approximate physical location at which the client device is located if it is determined that the client device does not continue to be located at the first approximate physical location; and

providing information associated with the second approximate physical location to the surveillance system, wherein the surveillance system is configured to observe at least the second approximate physical location.

6. The method of claim 5 further including:

observing at least the first approximate physical location using the surveillance system after the information associated with the first approximate physical location is provided to the surveillance system.

7. The method of claim 6 wherein the surveillance system includes a plurality of monitoring devices and the method further includes:

identifying a first monitoring device of the plurality of monitoring devices as being suitable for observing the first approximate physical location.

8. The method of claim 5 further including:

determining if the client device has ceased attempting to gain the unauthorized access to the wireless network; and

providing an indication to the surveillance system that the client device has ceased attempting to gain the unauthorized access to the wireless network if it is determined that the client device has ceased attempting to gain the unauthorized access to the wireless network.

9. The method of claim 5 wherein determining when the client device attempts to gain unauthorized access to the wireless network includes determining whether the client device is successful in gaining unauthorized access to the wireless network, the method further including:

providing information associated with the first approximate physical location to an interoperability and collaboration system, wherein the information identifies whether the client device is successful in gaining the unauthorized access to the wireless network.

10. An apparatus comprising:

means for determining when a client device attempts to gain unauthorized access to a wireless network;

located if it is determined that the client device attempts to gain unauthorized access to the wireless network;

means for providing information associated with the first approximate physical location to a surveillance system, wherein the surveillance system is configured to observe at least the first approximate physical location;

means for determining if the client device continues to be located at the first approximate physical location, wherein the means for determining if the client device continues to be located at the first approximate physical location include means for determining if the client device changes from attempting to gain unauthorized access to the wireless network through a first access point to attempting to gain unauthorized access to the wireless network through a second access point;

means for identifying a second approximate physical location at which the client device is located if it is determined that the client device does not continue to be located at the first approximate physical location; and

means for providing information associated with the second approximate physical location to the surveillance system, wherein the surveillance system is configured to observe at least the second approximate physical location.

11. The apparatus of claim 10 further including:

means for observing at least the first approximate physical location using the surveillance system after the information associated with the first approximate physical location is provided to the surveillance system.

12. The apparatus of claim 11 wherein the surveillance system includes a plurality of monitoring devices and the apparatus further includes:

means for identifying a first monitoring device of the plurality of monitoring devices as being suitable for observing the first approximate physical location.

13. The apparatus of claim 10 further including:

means for determining if the client device has ceased attempting to gain the unauthorized access to the wireless network; and

means for providing an indication to the surveillance system that the client device has ceased attempting to gain the unauthorized access to the wireless network if it is determined that the client device has ceased attempting to gain the unauthorized access to the wireless network.

14. The apparatus of claim 10 further including:

means for providing information associated with the first approximate physical location to an interoperability and collaboration system.

15. Logic encoded in one or more tangible, non-transitory computer-readable media for execution and when executed operable to:

determine when a client device attempts to gain unauthorized access to a wireless network;

identify a first approximate physical location at which the client device is located if it is determined that the client device attempts to gain unauthorized access to the wireless network;

provide information associated with the first approximate physical location to a surveillance system, wherein the surveillance system is configured to observe at least the first approximate physical location;

determine if the client device continues to be located at the first approximate physical location, wherein the logic operable to determine if the client device continues to be located at the first approximate physical location is further operable to determine if the client device changes from attempting to gain unauthorized access to the wireless network through a first access point to attempting to gain unauthorized access to the wireless network through a second access point;

identify a second approximate physical location at which the client device is located if it is determined that the client device does not continue to be located at the first approximate physical location; and

the surveillance system, wherein the surveillance system is configured to observe at least the second approximate physical location.

16. The logic of claim 15, when executed, further operable to:

observe at least the first approximate physical location using the surveillance system after the information associated with the first approximate physical location is provided to the surveillance system.

17. The logic of claim 16 wherein the surveillance system includes a plurality of monitoring devices and the logic is further operable to:

identify a first monitoring device of the plurality of monitoring devices as being suitable for observing the first approximate physical location.

18. The logic of claim 15, when executed, further operable to:

determine if the client device has ceased attempting to gain the unauthorized access to the wireless network; and

provide an indication to the surveillance system that the client device has ceased attempting to gain the unauthorized access to the wireless network if it is determined that the client device has ceased attempting to gain the unauthorized access to the wireless network.

19. The logic of claim 15, when executed, further operable to:

provide information associated with the first approximate physical location to an Internet Protocol interoperability and collaboration system.

20. An apparatus comprising:

an intrusion detection arrangement embodied on a tangible, non-transitory computer-readable medium, the intrusion detection arrangement being arranged to determine when a client without authorization attempts to access a wireless network, wherein the intrusion detection arrangement is associated with the wireless network; and

a location identification arrangement embodied on a tangible, non-transitory computer-readable medium, the location identification arrangement being arranged to identify at least a first approximate physical location of the client without authorization when the client without authorization attempts to access the wireless network, wherein the location identification arrangement is configured to communicate the first approximate physical location to surveillance arrangement that is arranged to monitor the first approximate physical location, wherein the intrusion detection arrangement is further arranged to determine when the client without authorization has successfully accessed the wireless network, and wherein the location identification arrangement is further configured to communicate an indication to the surveillance arrangement that the client without authorization has successfully accessed the wireless network when it is determined that the client without authorization has successfully accessed the wireless network.