Monitoring Device Slot Occupancy for PMF Wi-Fi Reconnection Blocking

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing technologies do not provide effective countermeasures for preventing easy reconnection of unauthorized access points in PMF-enabled Wi-Fi networks after communication connections are disconnected.

Innovation Solution

A monitoring device that repeatedly connects to unauthorized access points using non-overlapping device identification information to fill simultaneous connection slots, disconnects the unauthorized access point from connected clients, and uses different identification information to occupy available slots, thereby preventing reconnection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If fundamental countermeasures (physical elimination or power cutoff) are implemented against unauthorized devices, then communication blocking effectiveness is improved, but response time is worsened because these measures cannot be implemented immediately after detection

Engineering Contradiction:

Improvecommunication blocking effectivenessVSAvoidresponse time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-generating a pool of fake device identification information (MAC addresses) before they are needed. When an unauthorized device is detected, the monitoring device immediately uses these pre-prepared fake identifiers to connect to the unauthorized access point, filling its connection slots without waiting for fundamental countermeasures to be implemented. This resolves the contradiction by having the protective action ready in advance, enabling immediate response while maintaining effective communication blocking.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If deauthentication frames are used to disconnect unauthorized devices, then communication blocking is improved, but effectiveness is worsened in PMF-enabled networks where this method no longer functions

Engineering Contradiction:

Improvecommunication blocking effectivenessVSAvoidcompatibility with PMF networks

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies parameter changes by fundamentally changing the blocking mechanism from using deauthentication frames (which rely on PMF being disabled) to using connection slot occupation with fake device identifiers. This parameter change in the approach allows the system to maintain communication blocking effectiveness while becoming compatible with PMF-enabled networks, as the new method does not depend on PMF status but works within the existing PMF-protected communication framework.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If the monitoring device uses the damaged client's device identification information to connect, then disconnection of the damaged client is achieved, but the connection slot becomes available for reconnection

Engineering Contradiction:

Improvedisconnection effectivenessVSAvoidprevention of reconnection

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies merging by combining two actions: first using the damaged client's device identification information to disconnect the unauthorized connection, then immediately filling the freed connection slot with fake device identification information from the pre-generated pool. This merged approach ensures both disconnection effectiveness and prevention of reconnection, as the continuous occupation of connection slots with fake identifiers prevents the damaged client from reestablishing communication with the unauthorized access point.

Inventive Principle:

Principle #5Merging (Combining)

4Reliability

If the monitoring device repeatedly connects using generated device identification information, then connection slots are filled to prevent reconnection, but device complexity increases

Engineering Contradiction:

Improveprevention of reconnectionVSAvoidmonitoring device complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies copying by creating multiple fake copies of device identification information (MAC addresses) that mimic legitimate devices. Instead of implementing complex active monitoring and dynamic response systems, the monitoring device simply generates and uses these copied identifier patterns to fill connection slots. This copying approach achieves reliable prevention of reconnection while keeping the device complexity low, as it relies on straightforward identifier generation and connection establishment rather than sophisticated real-time analysis and response mechanisms.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS20250279843A1Monitoring device, monitoring method, and non-transitory computer readable medium

Publication Date: 2025.09.04 MITSUBISHI ELECTRIC CORP

AI summary

A monitoring device (100) includes a communication connection unit (124). The communication connection unit (124) repeatedly executes connection to an unauthorized AP when the unauthorized AP exists in its surroundings, in order to fill simultaneous connection slots of the unauthorized AP, using each device identification information of one or more pieces of device identification information generated not to overlap each other. When connection to the unauthorized AP fails, the communication connection unit (124) connects to the unauthorized AP using device identification information of a damaged CL connected to the unauthorized AP, so as to disconnect communication connection between the unauthorized AP and the damaged CL, and connects to the unauthorized AP using other device identification information, in order to fill vacant simultaneous connection slots of the unauthorized AP that have become available due to disconnection of the communication connection.