BSS Color Collision Detection in 802.11ax Networks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing BSS color collision event detection mechanisms in IEEE 802.11ax wireless networks are vulnerable to denial of service attacks, where malicious actors can exploit color changes to disrupt service, particularly affecting battery-operated IoT devices by causing unnecessary outages.

Innovation Solution

A management entity is introduced to detect and classify color collision events as benign or malicious by computing a probability based on duration, source control, and transmission characteristics, maintaining the BSS color when malicious to prevent unnecessary changes and alerting administrators.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the existing BSS color collision event detection mechanism is used, then color collision events can be detected, but the system becomes vulnerable to denial of service attacks where malicious actors can exploit color changes to disrupt service

Engineering Contradiction:
Improvedetection accuracyVSAvoiddenial of service attack vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a management entity as an intermediary between wireless access points and the central controller. This management entity receives color collision event indications from access points, computes probabilities to distinguish malicious from benign events, and sends appropriate indications to the central controller. This intermediary layer filters out false alarms caused by malicious attacks while preserving legitimate collision detections, thereby resolving the vulnerability to denial of service attacks without sacrificing detection accuracy.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If BSS color changes are performed frequently to handle collision events, then spatial reuse efficiency can be maintained, but battery-operated IoT devices experience unnecessary outages and service disruptions

Engineering Contradiction:
Improvespatial reuse efficiencyVSAvoidservice disruption duration
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by having the management entity compute the probability that a color collision event is malicious before triggering a BSS color change. By evaluating the likelihood of malicious intent in advance, the system can prevent unnecessary color changes caused by false alarm attacks, thereby avoiding service disruptions to IoT devices while still responding appropriately to legitimate collision events that would affect spatial reuse efficiency.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the system responds to all color collision events by changing BSS color, then collision issues can be resolved, but malicious attacks causing false collisions cannot be distinguished from legitimate events

Engineering Contradiction:
Improvecollision resolution effectivenessVSAvoidmalicious event identification
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent applies parameter changes by introducing a probability computation mechanism that evaluates multiple parameters of color collision events, including the duration threshold and transmission characteristics. The management entity changes the response parameter based on the computed probability: for benign events, it triggers BSS color changes to resolve collisions; for malicious events, it suppresses false alarms. This parameter-based differentiation allows the system to maintain collision resolution effectiveness while identifying and filtering malicious events.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11601469B2Detecting and preventing denial of service attacks due to fraudulent BSS color collision events
Publication Date: 2023.03.07 CISCO TECHNOLOGY INC
  • US11601469B2 patent drawing
  • US11601469B2 patent drawing
  • US11601469B2 patent drawing

AI summary

A management entity obtains from a first wireless access point a Basic Service Set (BSS) color collision event detected by the first wireless access point. The first wireless access point uses a first BSS color. A color collision event occurs when the first wireless access point receives from a device in a BSS of a different physical wireless access point a frame or PHY Protocol Data Unit (PPDU) that includes the first BSS color. The management entity obtains from the first wireless access point an indication whether the color collision event has been detected for longer than a predetermined duration. When the color collision event has been detected for longer than the predetermined duration, the management computes a probability of the color collision event. The management entity determines whether the color collision event is malicious or benign, and determines whether to maintain the first BSS color.