Wireless Access Point Security Through Physical-Layer Measurements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Criminals exploit wireless access points to steal sensitive information or commit fraud by masquerading as legitimate access points, using attacks like phishing and man-in-the-middle, which existing security mechanisms based on protocol compliance are ineffective against.
Innovation Solution
A client device measures parameters during communication with an access point, calculates indicators using a threat evaluation function derived from server-provided reference sets, and determines a threat indication to avoid further exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing security mechanisms based on protocol compliance are used, then security verification is simple, but they are ineffective against phishing and man-in-the-middle attacks where attackers masquerade as legitimate access points
Solution Approach 1:
The system performs preliminary measurements of wireless communication parameters (signal strength, channel quality, timing information) before establishing secure communication. These baseline measurements are stored and used for later comparison to detect malicious access points that masquerade as legitimate ones, enabling early threat detection before phishing or man-in-the-middle attacks can succeed.
Solution Approach 2:
The patent replaces traditional protocol-based security verification with a physics-based measurement approach. Instead of relying on cryptographic protocols and certificate validation, the system uses physical layer measurements (signal characteristics, propagation time, channel quality) to verify access point authenticity, substituting mechanical/security protocols with physical law-based detection.
2Measurement precision
If the client device measures multiple parameters and calculates indicators using threat evaluation functions, then threat detection accuracy improves, but processing time and computational resources increase
Solution Approach 1:
The system pre-calculates and stores baseline parameter values and threat evaluation functions during periods when no communication is active or when security threats are low. During active communication, the device only needs to measure current parameters and compare them against pre-computed baselines using stored evaluation functions, significantly reducing real-time processing requirements while maintaining high detection accuracy.
Solution Approach 2:
The system implements a tiered measurement approach where it continuously monitors a subset of critical parameters (such as signal strength and timing) at high frequency, while periodically measuring additional parameters (such as channel quality and spectral characteristics). This partial monitoring strategy maintains adequate threat detection accuracy while reducing overall processing time and computational load compared to measuring all parameters continuously.
Data Source
AI summary
Methods and apparatuses providing access security for wireless communication networks. A client device (a smart phone, a tablet computer, etc.) attempting to communicate with an access point, determines the presence or absence of a threat indication using a set of reference values maintained by a server computer for the access point. The client device receives the set of reference values from the server computer, and extracts at least one value from measurement of at least one parameter during wireless communication of the client device with the access point. Upon detecting a deviation of the extracted value from an expected value that is defined by the set of reference values and based on the deviation, a user of the client device can be alerted on a threat indication, and the communication of the client device with the active access point can be diverted or suspended.