Using a connected wireless computer as a conduit for a disconnected wireless computer

• US 20060077946A1
• Filed: 01/31/2005
• Published: 04/13/2006
• Est. Priority Date: 09/24/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bahl, Paramvir, Chandra, Ranveer, Adya, Atul
• Granted Patent: US 7,760,654 B2
• Time in Patent Office: Days
• US Class Current: 370/349
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/55 involving three or more devices, e.g. group pairing
• CPC Class Codes: H04W 24/04 Arrangements for maintaining operational condition
• CPC Class Codes: H04W 24/08 Testing, supervising or monitoring using real traffic
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Systems and methods are described for using client conduits to enable bootstrapping and fault diagnosis of disconnected wireless clients. Client conduits are used to enable disconnected clients to diagnose their problems with the help of nearby clients. This technique may take advantage of the beaconing and probing mechanisms of IEEE 802.11 to ensure that connected clients do not pay unnecessary overheads for detecting disconnected clients. Methods are also described for detecting rogue devices disguising as disconnected clients.

Claims

1. A computer-readable medium including computer-executable instructions facilitating communications between an infrastructure network and a first wireless computing device disconnected from the network via a second wireless computing device connected to the network, the computer-executable instructions executing on the first wireless computing device and performing the steps of:

enabling a promiscuous mode on the first wireless computing device for monitoring wireless traffic on a plurality of channels;

examining traffic packets of the second wireless computing device and determining that the second wireless computing device is connected to the infrastructure network;

creating a new wireless network on a channel corresponding to the second wireless computing device;

broadcasting a distress signal on the new wireless network;

terminating the distress signal in response to receiving an acknowledgement from the second wireless computing device; and

starting an ad hoc wireless network for connection by the second wireless computing device.

2. The computer-readable medium of claim 1 further performing the step of transmitting an acknowledgement to the second wireless computing device prior to starting the ad hoc network.

3. The computer-readable medium of claim 1 further performing the step of sending authentication information to the second wireless computing device in order to be authenticated with the infrastructure network.

4. The computer-readable medium of claim 1 further performing the step of sending diagnostic messages to the infrastructure network via the second wireless computing device.

5. The computer-readable medium of claim 1 wherein creating the new wireless network comprises causing the first wireless computing device to start an ad hoc network or to behave as a wireless access point, and wherein the distress signal comprises a beacon according to a known wireless protocol.

6. The computer-readable medium of claim 5 wherein the beacon comprises a random number.

7. The computer-readable medium of claim 1 wherein the distress signal comprises broadcast packets configured according to a public or proprietary protocol.

8. A computer-readable medium including computer-executable instructions facilitating communications between an infrastructure network and a first wireless computing device disconnected from the network via a second wireless computing device connected to the network, the computer-executable instructions executing on the second wireless computing device and performing the steps of:

receiving a distress signal from the first wireless computing device;

sending an acknowledgement of the distress signal to the first computing device;

receiving a response, from the first wireless computing device, to the acknowledgement; and

causing the second wireless computing device to join an ad hoc network originated by the first wireless computing device, whereby the second wireless computing device is substantially simultaneously connected to both the ad hoc network and the infrastructure network.

9. The computer-readable medium of claim 8 wherein the second wireless computing device joins the ad hoc network via a multinet mode.

10. The computer-readable medium of claim 9, the computer-executable instructions further performing the step of causing the second wireless device to enter the multinet mode as a result of receiving the response to the acknowledgment.

11. The computer-readable medium of claim 8 wherein the second wireless computing device comprises two or more wireless adapters, and wherein the second wireless computing device is connected with the infrastructure network via one wireless adapter, and is connected with the first wireless computing device via another wireless adapter.

12. The computer-readable medium of claim 8, the computer-executable instructions further performing the step of periodically scanning for distress signals from wireless computing devices disconnected from the infrastructure network.

13. The computer-readable medium of claim 8 wherein the distress signal comprises a network identification label, and wherein the acknowledgement comprises a network identification label that is different from the network identification label included in the distress signal.

14. The computer-readable medium of claim 8 wherein the acknowledgement is an 802.11 probe request.

15. The computer-readable medium of claim 8 further performing the steps of:

receiving authentication information from the first wireless computing device; and

transmitting the authentication information to the infrastructure network.

16. The computer-readable medium of claim 15 further performing the steps of:

receiving credentials for the first wireless computing device from the infrastructure network; and

transmitting the credentials to the first wireless computing device.

17. The computer-readable medium of claim 16 whereby the transmitted credentials allow the first wireless computing device to wirelessly connect directly with the infrastructure network.

18. The computer-readable medium of claim 8 further performing the steps of:

receiving diagnostic messages from the first wireless computing device; and

transmitting the diagnostic messages to the infrastructure network via the second wireless computing device.

19. The computer-readable medium of claim 9 wherein the allocation of time for the connections to the infrastructure and ad hoc networks in multinet mode is controlled through a configurable setting.

20. The computer-readable medium of claim 8 further performing the steps of:

continuing to receive distress signals from the first computing device after receiving a response to the acknowledgement; and

identifying the first computing device as a rogue device.

21. A system for allowing a disconnected wireless computing device to communicate with an infrastructure network via a wirelessly connected wireless computing device, the system comprising:

a first diagnostic client program running on the disconnected wireless computing device; and

a second diagnostic client program running on the connected wireless computing device;

wherein the first diagnostic client program;

detects the presence of the connected wireless computing device;

causes a distress signal to be sent; and

creates an ad hoc wireless network on the disconnected wireless computing device; and

wherein the second diagnostic client program;

receives the distress signal; and

connects to the ad hoc wireless network on the disconnected wireless computing device while maintaining a substantially simultaneous connection to the infrastructure network.

22. The system of claim 21 wherein the second diagnostic client program connects to the ad hoc network after entering a multinet mode.

23. The system of claim 21 further comprising a diagnostic server program running on a network server on the infrastructure network, wherein the diagnostic server program receives authentication information sent on behalf of the disconnected wireless computing device by the second diagnostic client program running on the connected wireless computing device.

24. The system of claim 21 wherein the diagnostic server program facilitates authentication of the disconnected wireless computing device and transmits credentials for the disconnected wireless computing device via the second diagnostic client program running on the connected wireless computing device.

25. The system of claim 21 wherein the second diagnostic client program running on the connected wireless computing device receives diagnostic information from the first diagnostic program running on the disconnected wireless computing device, and wherein the second diagnostic client program forwards the diagnostic information to the diagnostic server program.