Wireless Access Point Range Mapping for Rogue AP Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Locating and managing unauthorized wireless access points in enterprise environments is challenging due to their ability to beacon wireless signals, which can compromise information security and network management.
Innovation Solution
Techniques for wireless access point mapping are employed to detect characteristics such as signal strength and data error rates at multiple locations, generating a reception range mapping to identify authorized access points and manage network activities, while ensuring privacy and security by discarding user data and detecting signals without decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Illumination intensity
If wireless access points beacon signals at typical RF radiation power, then wireless communication coverage is improved, but unauthorized access points become harder to detect and locate
Solution Approach 1:
The patent introduces mobile devices as intermediary detectors that users carry throughout the facility. These devices act as distributed sensors that detect access point signals and report locations, solving the problem of detecting beacoming harder when signal strength increases. The intermediary devices enable indirect detection of access points without requiring dedicated detection infrastructure.
Solution Approach 2:
The system leverages the mobile devices' own positioning capabilities and existing wireless communication functionality to perform detection. The mobile devices use their built-in GPS or location services to self-determine their positions, and use their existing wireless interfaces to detect access point beacons, eliminating the need for separate detection hardware.
2Measurement precision
If mobile devices collect and report access point signal data, then access point location mapping is improved, but user privacy and data security concerns increase
Solution Approach 1:
The patent extracts and reports only essential detection data (signal strength, access point identifier, device location) while discarding or not collecting sensitive user information. The system takes out only the minimum necessary data required for mapping purposes, leaving user privacy information separate and protected.
Solution Approach 2:
The mobile device acts as an intermediary that processes and anonymizes data locally before reporting to the central system. The device serves as a privacy-protecting layer that can filter, aggregate, or anonymize information before transmission, reducing privacy risks while maintaining mapping functionality.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
Techniques for wireless access point mapping are described. In at least some embodiments, various characteristics of a wireless access point are detected. Examples of such characteristics include signal strength for wireless signal transmitted by the wireless access point, identifying information for the wireless access point, data error rates for data transmitted by the wireless access point, and so forth. Characteristics of a wireless access point can be detected at multiple different geographic locations to enable a reception range mapping to be generated for the wireless access point, e.g., for an area in which signal reception for the wireless access point is qualitatively acceptable.