Integrated WLAN Access Point and WIPS Sensor

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing wireless local area network (WLAN) security systems require separate infrastructure for security monitoring and access points, leading to increased costs and performance degradation due to the need for dedicated wireless security systems overlaid on top of WLAN infrastructure.

Innovation Solution

Combining WLAN infrastructure and wireless security functionality into a single device using a common radio platform with multiple WLAN radios and a unified management system, allowing for concurrent access and sensing capabilities while minimizing interference and optimizing resource allocation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a dedicated wireless security system is overlaid on top of WLAN infrastructure, then security monitoring capability and visibility are improved, but deployment cost and system complexity increase

Engineering Contradiction:
Improvesecurity monitoring capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines wireless security sensing functionality with WLAN access point functionality into a single integrated device. The AP/sensor device includes both AP circuitry for providing WLAN access and sensor circuitry for performing wireless security sensing, eliminating the need for separate overlaid security systems while maintaining both security monitoring and network access capabilities in one unified platform.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The integrated AP/sensor device performs multiple functions simultaneously: it provides WLAN access point services for client devices while concurrently performing wireless security sensing, channel monitoring, and intrusion detection. This multi-functional approach replaces the need for dedicated security infrastructure with a universal device that handles both access and security tasks.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If separate wireless security systems are deployed, then 24x7 security monitoring is achieved, but deployment and management costs increase

Engineering Contradiction:
Improvecontinuous security monitoringVSAvoiddeployment cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent merges security sensing operations with standard WLAN access point operations in a single device. The AP/sensor device continuously performs security sensing on all channels while providing WLAN access, eliminating the need for separate dedicated security infrastructure and reducing deployment costs while maintaining 24x7 monitoring capability.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The integrated device performs security monitoring as part of its normal operational cycle without requiring separate dedicated resources. The sensor circuitry leverages the existing radio infrastructure and operational periods of the AP to conduct security sensing, allowing the system to serve its own security needs through its primary access point functionality.

Inventive Principle:
Principle #25Self-service

3Ease of manufacture

If WLAN infrastructure APs are used for security sensing, then cost is reduced, but performance degrades under increased load

Engineering Contradiction:
Improvedeployment costVSAvoidsecurity performance
Core Design Contradiction:
Ease of manufactureVSProductivity

Solution Approach 1:

The patent segments the radio functionality into distinct AP circuitry and sensor circuitry components within the integrated device. This segmentation allows the sensor circuitry to perform security sensing operations independently from the AP's client access operations, preventing performance degradation by isolating security tasks from access point workload.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system dynamically manages radio resource allocation between AP and sensor functions based on operational conditions. The controller coordinates between AP and sensor operations to optimize performance, adjusting sensing activities and access point operations to maintain both security monitoring quality and network access performance under varying load conditions.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP2433439B1Concurrent wireless local area network access and sensing
Publication Date: 2018.07.11 EXTREME NETWORKS INC
  • EP2433439B1 patent drawingFigure 1
  • EP2433439B1 patent drawingFigure 2
  • EP2433439B1 patent drawingFigure 3

AI summary

This invention describes systems and methods for combining the Wireless Local Area Network infrastructure and Wireless Intrusion Prevention Systems by leveraging a common radio platform equipped with more than one WLAN radio and a unified management system. The invention provides all the benefits of the WLAN, without sacrificing the 24x7 dedicated security monitoring and performance troubleshooting available from an overlay WIPS system, while reducing the deployment cost and management complexity, by sharing a common hardware platform for the WLAN Access Point and WIPS sensor and leveraging an integrated management system.