Signal fingerprinting for authentication of communicating devices

• US 9,913,139 B2
• Filed: 06/09/2015
• Issued: 03/06/2018
• Est. Priority Date: 06/09/2015
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Gross, David, Lackey, Joshua, Levy, Donald E., Piqueras Jover, Roger, Ramachandran, Jayaraman, Serban, Cristina
• Primary Examiner(s): HEIBER, SHANTELL LAKETA
• Application Number:
  US14/733,988
• Publication Number:
  US 20160366586A1
• Time in Patent Office: 1,001 Days
• Field of Search: None
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Aspects of the subject disclosure may include, for example, accessing a profile including an expected fingerprint of expected parameters for received signals associated with a network path comprising a wired connection between network devices, comparing a fingerprint with the expected fingerprint where the fingerprint is generated from parameters measured from a signal, and authenticating a network device along the network path associated with the transmitting of the signal according to the comparing. Other embodiments are disclosed.

Claims

1. A method comprising:

receiving, by a waveguide system, electromagnetic waves at a physical interface of a transmission medium that propagate without utilizing an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, and wherein the electromagnetic waves have a non-optical frequency range; and

determining whether the electromagnetic waves are being received from a second network device according to a fingerprint of the electromagnetic waves,

wherein the determining whether the electromagnetic waves are being received from the second network device comprises;

determining, by the waveguide system, a difference between the fingerprint and an expected fingerprint of expected parameters for the electromagnetic waves transmitted by the second network device; and

responsive to the determining of the difference, requesting an authentication of the second network device.

2. The method of claim 1, wherein the determining whether the electromagnetic waves are being received from the second network device further comprises:

accessing, by the waveguide system, a profile associated with the second network device, the profile including the expected fingerprint of the expected parameters for the electromagnetic waves transmitted by the second network device;

measuring, by the waveguide system, parameters of the electromagnetic waves to generate the fingerprint of the electromagnetic waves; and

comparing, by the waveguide system, the fingerprint with the expected fingerprint.

3. The method of claim 2, comprising:

receiving, by the waveguide system from a server, the profile associated with the second network device.

4. The method of claim 2, wherein the expected parameters include frequency parameters, amplitude parameters, phase parameters, guided wave metrics, a wave mode, or a combination thereof.

5. The method of claim 2, further comprising storing the profile in a memory of the waveguide system.

6. The method of claim 1, comprising determining whether the electromagnetic waves are being received over a path that includes a group of third network devices according to the fingerprint of the electromagnetic waves and according to a group of expected fingerprints of expected parameters for other electromagnetic waves transmitted by the group of third network devices.

7. The method of claim 1, wherein the determining of whether the electromagnetic waves are being received from the second network device is performed by the waveguide system.

8. The method of claim 1, comprising:

responsive to the second network device being authenticated according to the authentication, receiving, by the waveguide system from a server, a revised profile associated with the second network device, the revised profile including a revised expected fingerprint of revised expected parameters for the electromagnetic waves transmitted by the second network device; and

storing the revised profile in a memory of the waveguide system.

9. A device comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

accessing a profile including an expected fingerprint of expected parameters for reflected signals associated with a transmission along a wired network path;

comparing a fingerprint with the expected fingerprint, wherein the fingerprint is generated from parameters measured from a reflected signal;

determining a device topology along at least a portion of the wired network path according to the comparing;

transmitting a test signal to a second communication device along the wired network path, wherein the reflected signal is associated with the test signal, and wherein the profile is associated with the second communication device; and

authenticating the second communication device according to the comparing of the fingerprint with the expected fingerprint.

10. The device of claim 9, wherein the reflected signal is associated with a transmission of electromagnetic waves at a physical interface of a transmission medium without utilizing an electrical return path, wherein the electromagnetic waves are guided by the transmission medium, and wherein the electromagnetic waves have a non-optical frequency range.

11. The device of claim 9, wherein the operations further comprise:

receiving the reflected signal;

measuring the parameters of the reflected signal; and

generating the fingerprint of the reflected signal according to the parameters.

12. The device of claim 9, wherein the determining of the device topology comprises:

determining a difference between the fingerprint and the expected fingerprint according to the comparing.

13. The device of claim 12, wherein the determining of the device topology comprises:

responsive to an authentication failure by the second communication device, determining that the second communication device is an unauthorized device along the wired network path.

14. The device of claim 12, wherein the operations further comprise:

responsive to the second communication device being authenticated according to the authentication, receiving a revised profile including a revised expected fingerprint of revised expected parameters for reflected signals associated with the transmission along the wired network path; and

storing the revised profile in the memory.

15. The device of claim 12, wherein the operations further comprise:

responsive to the determining of the difference, requesting an authentication of a second communication device along the wired network path.

16. A non-transitory machine-readable storage device comprising instructions, which when executed by a processor cause the processor to perform operations comprising:

accessing a profile including an expected fingerprint of expected parameters for received signals associated with a network path comprising a wired connection between network devices;

comparing a fingerprint with the expected fingerprint, wherein the fingerprint is generated from parameters measured from a signal; and

authenticating a network device along the network path associated with transmitting of the signal according to the comparing,

wherein the authenticating of the network device comprises;

determining a difference between the fingerprint and the expected fingerprint according to the comparing;

responsive to the determining of the difference, requesting an authentication of the network device along the network path; and

responsive to the authentication;

determining that the network device is an unauthorized device along the network path according to an authentication failure by the network device;

or

receiving a revised profile including a revised expected fingerprint of revised expected parameters for received signals associated with the network path according to an authentication success by the network device.

17. The non-transitory machine-readable storage device of claim 16, wherein the signal comprises electromagnetic waves received at a physical interface of a transmission medium, wherein the electromagnetic waves are guided by the transmission medium without utilizing an electrical return path, and wherein the electromagnetic waves have a non-optical frequency range.

18. The non-transitory machine-readable storage device of claim 16, wherein the operations further comprise:

receiving the signal along the network path;

measuring the parameters of the signal; and

generate the fingerprint of the signal according to the parameters.

19. The non-transitory machine-readable storage device of claim 16, wherein the expected parameters include frequency parameters, amplitude parameters, phase parameters, guided wave metrics, a wave mode, or a combination thereof.

20. The non-transitory machine-readable storage device of claim 16, wherein the operations further comprise storing the revised profile in a memory.