Ranging Station Selection for Rogue AP Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Ranging operations in mobile communications devices are compromised by rogue access points, leading to inaccurate location determination, which is critical in emergency scenarios where precise location information is essential.

Innovation Solution

An apparatus and method that detect timing clock attacks from rogue responding stations during ranging operations, select two additional responding stations with lower received signal strength indicators, and perform ranging operations using these stations to determine the device's position.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If more access points are used for ranging operations, then location accuracy is improved, but vulnerability to rogue access points increases

Engineering Contradiction:

Improvelocation accuracyVSAvoidrogue access point impact

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent changes the selection parameter from signal strength (RSSI) to a combination of signal strength and timing consistency. By modifying the selection criteria to include timing clock verification, the system can identify and exclude rogue access points that have lower signal strength but inconsistent timing, thus maintaining location accuracy while reducing vulnerability to rogue APs

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The patent implements a feedback mechanism where ranging measurements from multiple access points are analyzed for timing consistency. The system uses the measured time of flight (ToF) values to verify whether access points are legitimate or rogue, and adjusts the selection of access points for ranging based on this feedback, thereby resolving the contradiction between using more APs and avoiding rogue ones

Inventive Principle:

Principle #23Feedback

2Ease of operation

If signal strength is used as the primary selection criterion, then ease of operation is improved, but measurement precision deteriorates due to rogue access points with high signal strength

Engineering Contradiction:

Improveselection simplicityVSAvoidlocation accuracy

Core Design Contradiction:

Ease of operationVSMeasurement precision

Solution Approach 1:

The patent modifies the selection parameter from单一的signal strength (RSSI) to a composite parameter that includes both signal strength and timing consistency. This change maintains ease of operation by still considering signal strength while adding a timing verification layer that automatically filters out rogue access points, thus preserving location accuracy without significantly complicating the selection process

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS20250113194A1Rogue Station Handling in Ranging

Publication Date: 2025.04.03 APPLE INC

AI summary

An apparatus configured to determine an occurrence of a timing clock attack from a rogue responding station (R-rSTA) when performing a ranging operation, initiate a selection procedure to select two responding stations (rSTAs) from a plurality of rSTAs in addition to the R-rSTA, wherein the selected two rSTAs have lower received signal strength indicators (RSSI) values compared to other rSTAs of the plurality of rSTAs and perform the ranging operation using the R-rSTA and the selected two rSTAs to determine a position of the apparatus.