Network Coordinator Rogue Device Infiltration Mitigation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless automated systems, such as ZigBee networks, are vulnerable to rogue devices that can interfere with communications by 'jamming' radio frequency signals, leading to false reconnection requests and potential network infiltration, as existing security protocols rely on known master pairing encryption keys.

Innovation Solution

The network coordinator can proactively monitor packet exchange loss rates, received signal strength indicators, and foreign packets to detect potential attacks, sending warnings to users and requiring affirmative action before reestablishing connections, thereby preventing rogue device infiltration by blocking unauthorized re-pairing attempts.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the network allows automatic reconnection requests from wireless devices, then network reliability and ease of operation are improved, but the network becomes vulnerable to rogue device infiltration and security breaches

Engineering Contradiction:
Improvenetwork connection reliabilityVSAvoidrogue device infiltration
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The network coordinator performs preliminary monitoring and analysis of reconnection requests before allowing reconnection. It proactively detects potential rogue devices by analyzing packet loss rates, signal strength indicators, and device behavior patterns before the actual reconnection occurs, preventing security breaches in advance

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The network coordinator acts as an intermediary between wireless devices and the network infrastructure. It mediates reconnection requests by verifying device legitimacy through multiple checks (packet loss analysis, signal strength verification, behavior pattern matching) before granting access, thus protecting the network from rogue devices

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If the network monitors packet exchange loss rates, signal strength indicators, and foreign packets to detect attacks, then network security is improved, but device complexity and processing requirements increase

Engineering Contradiction:
Improvenetwork securityVSAvoidcoordinator device complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The network coordinator performs multiple security functions using a unified monitoring framework. It simultaneously tracks packet loss rates, analyzes signal strength indicators, detects foreign packets, and identifies rogue devices through a single integrated system, reducing overall complexity despite the multifunctional nature of security monitoring

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The monitoring system uses the existing network traffic and device communications to detect security threats. It analyzes naturally occurring packet exchanges, signal variations, and device behaviors without requiring additional dedicated monitoring infrastructure, allowing the system to monitor itself using its own operational data

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10187402B2Network intrusion mitigation
Publication Date: 2019.01.22 ECHOSTAR TECHNOLOGIES INTERNATIONAL CORP
  • US10187402B2 patent drawing
  • US10187402B2 patent drawing

AI summary

A request is received to reestablish a connection to an end device in a network. At least one datum is identified indicating an error condition, the at least one datum including one or more of a bit error rate (BER), a received signal strength indicator (RSSI) value, and a foreign packet. Based on the one or more data values, user input is requested to deny the reestablish connection request. In response to the user input, the end device is prevented from reestablishing a link on the network.