Wireless Access Point Position Verification Against Spoofed Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems are vulnerable to unauthorized access points spoofing authorized devices and hijacked terminals, which cannot be detected by conventional position detection sensors, leading to unauthorized network access and data theft.
Innovation Solution
A wireless communication device with a position information database, radio wave information acquisition, and position identification unit to determine the position of a communication partner device, collating it with map information to identify authorized or unauthorized devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a position detection sensor is placed independently of an access point or terminal device to estimate terminal position, then access control can be implemented to permit access only to terminals inside the service area, but the system cannot detect attacks by unauthorized access points spoofing authorized access points or hijacked terminals using high-directivity radio waves from remote locations
Solution Approach 1:
The patent merges the position detection function into the access point itself by equipping it with multiple antennas. The access point uses these antennas to receive radio waves from terminal devices and calculate their positions based on phase differences, eliminating the need for separate position detection sensors. This integration allows the access point to simultaneously perform both access control and position verification, enabling detection of spoofing attacks while maintaining reliable access control.
Solution Approach 2:
The patent replaces the mechanical position detection sensor system with an electromagnetic wave-based position calculation system. Instead of using physical sensors to detect terminal positions, the access point utilizes the phase information of radio waves received through multiple antennas to calculate terminal positions. This substitution enables more comprehensive attack detection capability while maintaining the access control function.
2Ease of operation
If conventional position detection sensors are used to determine terminal positions for access control, then authorized terminals can be identified, but attacks utilizing high-directivity antennas, carrier wave modulation, or beam forming from remote locations cannot be detected
Solution Approach 1:
The patent adds a new dimension to position detection by utilizing phase information from multiple antennas. Instead of relying solely on signal strength or distance measurements from a single sensor, the system calculates positions based on phase differences across multiple spatial dimensions. This multi-dimensional approach enables detection of radio waves originating from remote locations with high directivity, as the phase relationship patterns differ from legitimate terminals.
Solution Approach 2:
The access point is designed with multi-functionality, serving both as a communication access point and a position detection device. By equipping the access point with multiple antennas and position calculation capability, it can simultaneously perform wireless communication, access control, and security verification against spoofing attacks, eliminating the need for separate specialized sensors.
3Reliability
If an access point permits or denies access based on position detection sensor measurements, then access control is achieved, but the system lacks the capability to detect unauthorized access points spoofing authorized devices
Solution Approach 1:
The patent implements a feedback mechanism where the access point continuously calculates terminal positions based on radio wave phase information and compares these calculated positions with the authorized service area. This feedback loop enables real-time verification of terminal locations, allowing the system to detect and respond to spoofing attempts by identifying terminals that claim to be in the service area but whose radio wave characteristics indicate they are located elsewhere.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
The device effectively identifies and disconnects unauthorized access points, protecting the network by determining the position of communication partners without the need for additional sensors, and alerts users to potential threats.
Implementation Method 1
a radio wave information acquisition unit to extract a physical quantity of a communication radio wave received from a communication partner device
Implementation Method 2
a position identification unit to identify a position of the communication partner device on a basis of the physical quantity acquired by the radio wave information acquisition unit
Data Source
AI summary
A wireless communication device includes: a position information database (207) in which map information is stored; a radio wave information acquisition unit (203) to extract a physical quantity of a communication radio wave received from a communication partner device; a position identification unit (210) to identify a position of the communication partner device on a basis of the physical quantity acquired by the radio wave information acquisition unit; and a determination unit (208) to collate the position of the communication partner device which is identified by the position identification unit, with the map information stored in the position information database, and to determine whether the communication partner device is an authorized device or an unauthorized device.