Network Connection Managing System for MAC Address Spoofing Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network connection managing systems fail to prevent USB network cards from being unplugged from one device and plugged into another, leading to security loopholes and fraudulent use of MAC addresses, allowing unauthorized network connections.
Innovation Solution
A network connection managing system that uses data reporting software, WMI data reporting software, and Nmap network security scanning software to verify the MAC address and network node identifying data, ensuring a one-to-one relationship between the mobile network card and information device, thereby blocking unauthorized connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If MAC address authentication is used for network connection management, then network access convenience is improved, but security against unauthorized device connection deteriorates
Solution Approach 1:
The authentication system is segmented into multiple independent verification components: MAC address verification, device identifying data verification, and binding relationship verification. Each component operates independently to provide comprehensive security checks, preventing unauthorized connections while maintaining legitimate access convenience.
Solution Approach 2:
A binding relationship table is introduced as an intermediary data structure that stores the correspondence between MAC addresses and device identifying data. This intermediary component enables the system to verify not only the MAC address but also the binding relationship, thereby preventing MAC address spoofing and unauthorized device connections.
2Adaptability or versatility
If USB network card hot plugging is allowed, then device mobility and flexibility are improved, but security control over device usage deteriorates
Solution Approach 1:
The system performs preliminary authentication and binding verification before allowing network connection. When a USB network card is plugged in, the system proactively verifies the MAC address against the binding relationship table and checks whether the device identifying data matches. This preliminary action prevents unauthorized devices from gaining network access while allowing legitimate mobile devices to connect freely.
Solution Approach 2:
The system implements feedback control by continuously monitoring network connection requests and comparing them against the binding relationship database. When a USB network card attempts to connect, the system provides immediate feedback by accepting or rejecting the connection based on verification results, thereby maintaining security control over device mobility.
3Speed
If MAC address verification alone is used, then authentication speed is improved, but accuracy in identifying authorized devices deteriorates
Solution Approach 1:
The system performs partial verification by checking multiple data elements (MAC address, device identifying data, and binding relationship) rather than requiring complete verification of all possible device attributes. This approach achieves sufficient identification accuracy while maintaining acceptable authentication speed for practical network access control.
Data Source
AI summary
The present invention discloses a network connection managing system comprising one or more information devices, a network node data verifying device and a network node connection managing device. The information device is a network node installed with a mobile network card such that a MAC address of the mobile network card and network node identifying data of the network node are transmitted to the network node data verification device by a data reporting software, and are then compared by the network node data verifying device. The network node connection managing device is connected to the network node data verifying device and blocks a network connection for the network node according to a comparison result.