Access Point Beamforming for Wireless Device Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless IoT devices often have minimal authentication mechanisms, making them vulnerable to security compromises such as physical tampering and masquerading, which can lead to unauthorized access to wireless networks.

Innovation Solution

Implementing a position- or direction-based authentication system using a fixed antenna array to determine the angle and signal strength of wireless devices, granting access only when within predetermined ranges, thereby differentiating authorized from unauthorized devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If position- or direction-based authentication is implemented using beamforming, then wireless network security is improved, but device complexity increases

Engineering Contradiction:
Improvewireless network securityVSAvoidauthentication system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces traditional mechanical or software-based authentication mechanisms with a physics-based beamforming authentication system. The access point uses antenna arrays to create directional beams and measure signal characteristics (angle of arrival, signal strength) to authenticate devices based on their physical location, substituting complex authentication protocols with physical layer verification.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces beamforming signals as an intermediary mechanism between the access point and wireless devices. These signals serve dual purposes: establishing wireless communication and carrying authentication information through their directional characteristics and signal properties, thus mediating both communication and security functions.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If beamforming authentication is implemented, then unauthorized access is reduced, but measurement precision requirements increase

Engineering Contradiction:
Improveunauthorized accessVSAvoidangle and signal strength measurement precision
Core Design Contradiction:
Object-affected harmful factorsVSMeasurement precision

Solution Approach 1:

The patent changes the authentication parameters from traditional credentials (passwords, keys) to physical signal parameters (angle of arrival, signal strength, beam direction). By measuring these physical parameters with predetermined thresholds and ranges, the system achieves location-based authentication without requiring extremely precise measurements, as long as the measurements are sufficient to distinguish authorized from unauthorized devices.

Inventive Principle:
Principle #35Parameter changes

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach effectively reduces the risk of malicious devices connecting to the network by ensuring only devices within authorized areas can access the network, enhancing the robustness of wireless network security.

Implementation Method 1

determining, with the AP via beamforming of a fixed antenna array of the AP, whether an angle of the wireless device relative to the fixed antenna array is within a first predetermined range

Methodology Applied
Scientific EffectBeamforming:

Implementation Method 2

determining, with the AP, whether a received signal strength between the AP and the wireless device is within a second predetermined range

Methodology Applied
Scientific EffectSignal strength measurement:

Data Source

PatentUS10542481B2Access point beamforming for wireless device
Publication Date: 2020.01.21 ARUBA NETWORKS INC
  • US10542481B2 patent drawing
  • US10542481B2 patent drawing
  • US10542481B2 patent drawing

AI summary

In some examples a method includes receiving, with an Access Point (AP), a request from a wireless device to access a network through the AP; determining, with the AP via beamforming of a fixed antenna array of the AP, whether an angle of the wireless device relative to the fixed antenna array is within a first predetermined range; determining, with the AP, whether a received signal strength between the AP and the wireless device is within a second predetermined range; and granting, with the AP, the wireless device access to a network through the AP when it is determined that the angle of the wireless device relative to the fixed antenna array is within the first predetermined range and the received signal strength is within the second predetermined range.