WiFi 7 Multi-Link Reconfiguration for Unauthorized AP Termination

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Unauthorized access points (APs) pose a significant threat to network security as they can intercept client data by mimicking legitimate networks, and existing WLAN and WIPS technologies struggle to effectively prevent such connections.

Innovation Solution

A computing system identifies prohibited wireless communication links between client devices and unauthorized APs, transmitting spoofed management frames that indicate the link is no longer available, causing the client device to terminate the connection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If WLAN and WIPS technologies are advanced to increase complexity, then network security monitoring capability is improved, but the ability to prevent connections to unauthorized APs deteriorates

Engineering Contradiction:

Improvenetwork security monitoring capabilityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Instead of having the access point actively reject unauthorized connections, the patent inverts the approach by having the client device receive欺骗性 reconfiguration messages that cause it to voluntarily terminate connections to unauthorized APs. This reversal of the traditional rejection mechanism allows the system to prevent unauthorized connections without requiring complex active monitoring and intervention capabilities.

Inventive Principle:

Principle #13The other way round (Inversion)

2Difficulty of detecting and measuring

If traditional WIPS technologies are used to detect unauthorized APs, then detection capability is improved, but the ability to terminate unauthorized links deteriorates

Engineering Contradiction:

Improveunauthorized AP detection capabilityVSAvoidunauthorized link termination capability

Core Design Contradiction:

Difficulty of detecting and measuringVSReliability

Solution Approach 1:

The patent introduces a mediator component that generates and transmits reconfiguration messages to client devices. This intermediary mechanism bridges the gap between detecting unauthorized APs and terminating unauthorized links by providing a controlled communication channel that instructs clients to disconnect, thereby enabling reliable termination without requiring the detecting system to directly enforce disconnection.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a copy of the legitimate reconfiguration message format and uses it to send termination instructions to client devices. By replicating the structure and appearance of authentic network management frames, the system can effectively communicate link termination commands to clients without requiring direct intervention from the unauthorized AP or complex enforcement mechanisms.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS12627983B2Intrusion prevention using reconfiguration multi-link elements in WiFi 7

Publication Date: 2026.05.12 ARISTA NETWORKS INC

AI summary

A communication link between an unauthorized AP MLD in a wireless network and a client device is terminated in response to spoofing a communication from the unauthorized AP MLD. The communication is sent from a device different than the unauthorized AP MLD to the client device and includes a source identifier that identifies the unauthorized AP MLD as a source device of the communication. The communication additionally or alternatively may contain or indicate a management or configuration element. The management or configuration element may include a reconfiguration multi-link element that specifies the first wireless communication link as no longer available.