Rogue Wireless Beacon Detection via Packet Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for comprehensive and automated management of wireless beacon devices to detect unauthorized, moved, or missing devices, which are not addressed by existing technologies.

Innovation Solution

A system comprising monitor devices and a management server that receive and analyze beacon packets to identify authorized devices, detect rogue devices, and generate notifications, utilizing existing WLAN APs to scan frequency bands and aggregate data for location-based services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual monitoring of beacon devices is performed, then detection accuracy can be maintained, but labor costs and time consumption increase significantly

Engineering Contradiction:
Improvedetection accuracyVSAvoidtime consumption
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system enables automated self-detection of beacon devices through monitor devices that automatically scan frequency bands, receive beacon packets, and analyze device authenticity without human intervention. The management server autonomously compares device identifiers against authorized lists and generates notifications for unauthorized devices, eliminating the need for manual monitoring while maintaining detection accuracy.

Inventive Principle:
Principle #25Self-service

2Reliability

If comprehensive monitoring of all beacon devices is implemented, then detection of unauthorized devices improves, but system complexity increases

Engineering Contradiction:
Improvedetection completenessVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The monitoring system is segmented into specialized components: monitor devices that scan and receive beacon packets, management servers that analyze data and maintain authorized device lists, and notification systems that alert administrators. This segmentation allows comprehensive monitoring to be distributed across multiple simple, specialized devices rather than requiring one complex centralized system.

Inventive Principle:
Principle #1Segmentation

3Productivity

If automated detection systems are deployed, then operational efficiency improves, but initial setup and infrastructure requirements increase

Engineering Contradiction:
Improveoperational efficiencyVSAvoidinfrastructure requirements
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

Monitor devices are designed to perform multiple functions: they can monitor beacon devices, provide location-based services to user devices, and operate as part of the existing WLAN infrastructure. This multi-functionality reduces the need for dedicated specialized hardware, lowering infrastructure requirements while maintaining automated detection capabilities.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9258713B2Rogue wireless beacon device detection
Publication Date: 2016.02.09 CISCO TECHNOLOGY INC
  • US9258713B2 patent drawing
  • US9258713B2 patent drawing
  • US9258713B2 patent drawing

AI summary

Techniques are presented for detecting rogue wireless beacon devices. Wireless transmissions from beacon devices are received at a plurality of receiver devices. The wireless transmissions of the beacon devices comprise packets that carry information used for location-based services for mobile wireless devices. Content of one or more fields of the packets transmitted by the beacon devices and received by one or more of the receiver devices is obtained. The content of one or more fields of the packets is analyzed to detect an unauthorized beacon device. The analyzing operation may involve comparing the content of the one or more fields of the packets against a list that contains one or more identifiers for authorized beacon devices. In another form, analyzing may involve analyzing the content of the one or more fields of the packets with pattern information related to advertising content or advertising source.