RF Firewall Coordination for Wireless Client Location

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless networks face challenges in preventing unauthorized access due to the propagation of radio frequency energy, which allows network access outside the intended building perimeter, necessitating a solution to enhance security and management.

Innovation Solution

Implementing an RF firewall coordination system that uses RF firewall wireless access points to detect signal strength and determine whether clients are inside or outside a predefined area, applying network access policies accordingly, thereby improving security and user experience.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If RF firewall coordination is implemented to determine client location and apply access policies, then network security is improved, but device complexity increases

Engineering Contradiction:
Improvenetwork securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the RF firewall functionality by deploying dedicated RF firewall access points positioned at strategic locations around the building perimeter. These segmented access points independently perform location determination and access policy enforcement, distributing the security function across multiple simplified nodes rather than requiring a single complex centralized system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary coordination mechanism that bridges the data access points and RF firewall access points. This intermediary layer simplifies the interaction between different system components by providing a standardized interface for location determination requests and access policy decisions, reducing the overall system complexity while maintaining security effectiveness.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If RF signal strength detection is used to determine client location rapidly, then access policy application speed is improved, but measurement precision may be compromised

Engineering Contradiction:
Improveaccess policy application speedVSAvoidlocation determination accuracy
Core Design Contradiction:
ProductivityVSMeasurement precision

Solution Approach 1:

The system employs local quality by having RF firewall access points specifically positioned at the building perimeter where they can detect RF signal strength from clients. Each perimeter access point performs localized measurement and determination of client location relative to the building boundary, optimizing both the speed and accuracy of location determination for security purposes without requiring complex centralized processing.

Inventive Principle:
Principle #3Local quality

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

The RF firewall system effectively and rapidly determines client location, allowing for quick application of access policies, thereby enhancing network security and user experience by preventing unauthorized access.

Implementation Method 1

Due to the propagation of radio frequency (RF) energy during communications in a wireless network, the wireless network within a building may be detected strongly enough outside of the building to allow network access

Methodology Applied
Scientific EffectRadio frequency propagation: Electromagnetic Induction

Data Source

PatentUS9137663B2Radio frequency firewall coordination
Publication Date: 2015.09.15 CISCO TECHNOLOGY INC
  • US9137663B2 patent drawing
  • US9137663B2 patent drawing
  • US9137663B2 patent drawing

AI summary

In one embodiment, a method includes identifying, responsive to a triggering event, one or more radio frequency (RF) firewall transceivers that neighbor a data wireless access point to which a given wireless client is communicating; configuring one or more of the identified neighboring RF firewall transceivers to detect RF frames transmitted by the wireless client; causing the data wireless access point to transmit one or more wireless messages operative to cause the wireless client to transmit RF frames; collecting RF signal data corresponding to the RF frames transduced by one or more of the identified neighboring RF firewall transceivers; transmitting the collected RF signal data to a location system; receiving from the location system an indication of the location of the wireless client; and applying one or more network access policies based on the indication of the location.