Wireless Mesh Network Security via Virtual Map Comparison

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional technologies fail to securely determine the integrity of wireless mesh networks used by beacon devices, as they do not effectively monitor changes in signal strength or detect unauthorized modifications, which can lead to compromised user financial information.

Innovation Solution

A computer-implemented method where a master beacon device constructs virtual maps of a wireless mesh network by receiving signal strength indicators and hardware identifiers from servant beacon devices, comparing these maps over time to detect any significant changes or unauthorized modifications, and alerts or disables the network if the network is deemed insecure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If beacon devices are arranged in a wireless mesh network to enable proximity-based transactions, then convenience of operation is improved, but network security deteriorates due to vulnerability to unauthorized device insertion and signal interception

Engineering Contradiction:
Improveconvenience of proximity-based transactionsVSAvoidnetwork security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary actions by establishing a baseline virtual map of the mesh network topology and RSSI values before transactions occur. This baseline is created and stored in advance, enabling later comparison to detect any unauthorized changes or insertions of malicious beacon devices, thus preventing security breaches while maintaining operational convenience

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system continuously monitors RSSI values from beacon devices and compares current measurements against the baseline virtual map. When deviations are detected, the system provides feedback by alerting users or disabling transactions, creating a closed-loop security mechanism that maintains reliability without compromising ease of operation

Inventive Principle:
Principle #23Feedback

2Device complexity

If conventional technologies are used without virtual map comparison, then device complexity is reduced, but measurement precision deteriorates regarding detection of unauthorized network modifications

Engineering Contradiction:
Improvesimplicity of network implementationVSAvoiddetection accuracy of unauthorized changes
Core Design Contradiction:
Device complexityVSMeasurement precision

Solution Approach 1:

The system creates a virtual copy (virtual map) of the physical mesh network topology and RSSI characteristics. This digital replica is compared against actual network measurements to detect unauthorized changes. The copying approach enables precise detection of security threats while adding minimal complexity, as the virtual map is simply data structure that mirrors the physical network

Inventive Principle:
Principle #26Copying

3Reliability

If periodic virtual map comparison is implemented to detect unauthorized beacon devices, then network security is improved, but loss of time increases due to continuous monitoring and map construction

Engineering Contradiction:
Improvenetwork security detectionVSAvoidtime for map construction and comparison
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs virtual map construction and comparison operations periodically rather than continuously. Baseline maps are established at scheduled intervals, and current network states are compared against these baselines periodically. This periodic approach maintains security detection capability while significantly reducing computational overhead and time loss compared to continuous monitoring

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The system performs partial comparisons by focusing only on critical RSSI values and network topology elements that indicate security threats, rather than analyzing every network parameter. This selective approach maintains high detection accuracy for unauthorized beacon devices while minimizing the time required for each comparison cycle

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP4037254B1Securing a wireless mesh network via a chain of trust
Publication Date: 2023.11.08 GOOGLE LLC
  • EP4037254B1 patent drawingFigure 1
  • EP4037254B1 patent drawingFigure 2
  • EP4037254B1 patent drawingFigure 3

AI summary

A master beacon device emits a data packet that is received and retransmitted by servant beacon devices in a wireless mesh network that enables the beacon devices to detect the received signal strength indicator ("RSSI") of beacon devices in proximity. Each servant beacon device transmits survey data packets comprising the RSSIs and hardware identifiers of proximate beacon devices to the master beacon device, which constructs a first virtual map of the mesh network. At a later time, each servant beacon device transmits authentication data packets, which are retransmitted, each retransmitting beacon inserting an RSSI and hardware identifier of the beacon device from which the authentication data packet was received, until they reach the master beacon device, which constructs a second virtual map of the mesh network. The master beacon device compares the first virtual map to the second virtual map to determine if the network is secure.