Multi-Boot Access Points for Dynamic Rogue Detection

Solution Overview

Problem

Traditional approaches to rogue device detection in wireless networks either require additional hardware, leading to higher costs, or compromise on product features by using a single vendor for both data services and detection, resulting in inefficiencies.

Innovation Solution

Deploying multi-boot access points (APs) that can switch between software images, allowing network managers to select the appropriate functionality for each instance, such as switching to sensor mode for threat detection, and enabling dynamic or scheduled changes in boot images to optimize network functionality.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a second set of hardware is used in addition to APs for rogue detection, then detection capability is improved, but capital and operational expenditures increase

Engineering Contradiction:

Improverogue detection capabilityVSAvoidhardware quantity and cost

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The access point is designed to perform multiple functions by loading different software images. It can operate as a traditional AP providing data services or as a sensor providing rogue detection services. This multi-functionality eliminates the need for separate dedicated detection hardware, reducing both capital and operational expenditures while maintaining detection capability.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent combines rogue detection functionality with the existing access point infrastructure. By integrating sensor capabilities into the AP and using the same hardware platform for both data services and security monitoring, the system merges previously separate functions into a unified platform, reducing hardware quantity and cost.

Inventive Principle:

Principle #5Merging (Combining)

2Quantity of substance

If an integrated network is used for both data services and rogue detection, then capital expenditures are reduced, but product feature sets are compromised due to single vendor requirement

Engineering Contradiction:

Improvehardware quantity and costVSAvoidproduct feature set

Core Design Contradiction:

Quantity of substanceVSAdaptability or versatility

Solution Approach 1:

The access point is designed to perform multiple functions by loading different software images. It can operate as a traditional AP providing data services or as a sensor providing rogue detection services. This multi-functionality eliminates the need for separate dedicated detection hardware, reducing both capital and operational expenditures while maintaining detection capability.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system dynamically switches between different operational modes (AP mode or sensor mode) by loading different software images. This dynamic reconfigurability allows the same hardware to adapt to different functional requirements, maintaining versatility and avoiding the limitations of single-vendor integrated solutions.

Inventive Principle:

Principle #15Dynamics

3Device complexity

If APs are dedicated to a single function, then device simplicity is maintained, but adaptability to different network needs is reduced

Engineering Contradiction:

Improvesoftware configuration flexibilityVSAvoidfunctional adaptability

Core Design Contradiction:

Device complexityVSAdaptability or versatility

Solution Approach 1:

The system dynamically switches between different operational modes (AP mode or sensor mode) by loading different software images. This dynamic reconfigurability allows the same hardware to adapt to different functional requirements, maintaining versatility and avoiding the limitations of single-vendor integrated solutions.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system changes its operational parameters by loading different software images that configure the AP for different functions. This parameter change approach allows the device to transition between providing data services and providing security monitoring, maintaining simplicity while achieving adaptability.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS7865713B2Application-aware wireless network system and method

Publication Date: 2011.01.04 TRAPEZE NETWORKS INC

AI summary

A technique for dynamically responding to threats in a wireless network involves deploying a single network including APs capable of booting from a plurality of software images. Individual APs can switch (or be switched) between multiple sets of software so that network managers can select the AP software most appropriate for a given instance. For example, if a threat is detected, multiple APs can be switched to sensor mode to deal with the threat. As another example, all of the APs can be switched to sensor mode after hours. Alternatively, a server can provide the software image(s) needed for an AP to operate in accordance with a desired functionality.