Backhaul Network Rogue Device Detection and Mitigation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Managing rogue devices in networks is challenging due to their high mobility, making it difficult to determine and mitigate rogue access points and client devices effectively.

Innovation Solution

Implementing a system that uses a network backhaul to detect rogue devices, determine their location, and perform mitigation by sending messages to switches, updating tables, and blocking unauthorized access through a nearest switch.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Difficulty of detecting and measuring

If traditional rogue device detection methods are used, then detection capability is provided, but location determination accuracy deteriorates due to high mobility of rogue devices

Engineering Contradiction:

Improverogue device detection capabilityVSAvoidlocation determination accuracy

Core Design Contradiction:

Difficulty of detecting and measuringVSMeasurement precision

Solution Approach 1:

The patent introduces a backhaul network as an intermediary between rogue devices and the detection system. By monitoring traffic flows through backhaul switches, the system can indirectly track rogue devices without requiring direct detection of the mobile devices themselves, thereby maintaining location determination accuracy despite high mobility

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements continuous feedback loops where rogue device messages are sent to backhaul switches, which then provide updates on device locations and status. This real-time feedback mechanism allows the system to track mobile rogue devices accurately by constantly updating location information based on network traffic patterns

Inventive Principle:

Principle #23Feedback

2Reliability

If comprehensive rogue device monitoring is implemented, then mitigation effectiveness is improved, but system complexity increases due to multiple switches and tables

Engineering Contradiction:

Improvemitigation effectivenessVSAvoidsystem structure complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the monitoring system into distinct functional components: rogue device detection modules, backhaul switches with forwarding tables, rogue monitor tables, and mitigation modules. Each component has a specific function, which simplifies the overall system architecture while maintaining comprehensive monitoring capability across the network

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system adds a new dimension to rogue device management by utilizing the backhaul network infrastructure as an additional monitoring layer. Instead of only monitoring at the access level, the system leverages the backhaul dimension to gain broader visibility and control over rogue devices, improving mitigation effectiveness without proportionally increasing complexity

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS10542035B2Managing rogue devices through a network backhaul

Publication Date: 2020.01.21 EXTREME NETWORKS INC

AI summary

Managing rogue devices in a network through a network backhaul. A rogue device is detected in a network and a rogue device message that includes the rogue device is sent to a plurality of switches in a backhaul of the network. The rogue device is added into a rogue monitor table. Whether the rogue device is In-Net or Out-Of-Net is determined using forwarding tables of the plurality of switches in the backhaul of the network and the rogue monitor table. Mitigation is performed using a nearest switch to the rogue device of the plurality of switches in the backhaul of the network if it is determined that the rogue device is In-Net.