Wireless Device Blocking Tool for Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Large networks face challenges in timely identification and removal of compromised devices, which can reconnect and compromise the network, making it difficult to maintain security against malicious activities.
Innovation Solution
A wireless device blocking tool that identifies compromised devices by their MAC and IP addresses, determines connection types (wireless or wired), and updates access control lists to block these devices from reconnecting through a user interface, location engine, and connection engine, ensuring they cannot reconnect to the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network security measures are implemented to block compromised devices, then network security is improved, but device complexity increases due to the need to identify and track multiple connection types
Solution Approach 1:
The blocking tool is divided into distinct functional modules: a user interface for input, a location engine for determining connection types and identifying connection points, and a connection engine for executing blocks. This segmentation allows each component to handle specific tasks independently, reducing overall system complexity while maintaining comprehensive security functionality.
Solution Approach 2:
The location engine acts as an intermediary between the user interface and connection engine, mediating the complex task of determining connection types and identifying target connection points. This intermediary layer simplifies the interaction between components and enables the system to handle both wired and wireless blocking scenarios through a unified approach.
2Reliability
If the blocking tool determines connection types and identifies connection points for both wired and wireless devices, then blocking effectiveness is improved, but the time required to identify and block devices increases
Solution Approach 1:
The location engine performs preliminary determination of connection types and identification of connection points before the actual blocking action is executed. By pre-processing this information and preparing the blocking parameters in advance, the system reduces the time required for the actual blocking operation and minimizes the overall response time for compromised device removal.
3Reliability
If the system blocks devices through multiple connection points (WLC for wireless, switch for wired), then comprehensive blocking is achieved, but the difficulty of detecting and measuring connection types increases
Solution Approach 1:
The location engine automatically determines connection types and identifies connection points without requiring manual detection or measurement by the operator. The system self-determines whether a device connected wirelessly through a WLC or wired through a switch, eliminating the need for complex manual detection procedures while achieving comprehensive blocking coverage.
Data Source
AI summary
A wireless device blocking tool includes a user interface, a location engine, and a connection engine. The user interface receives at least one of a MAC address and an IP address of a device. The location engine communicates a query to an access control server, receives a response from the access control server, and determines, based on the response, whether the device connected to a network through a wireless connection or a wired connection. If the device connected through the wireless connection, the location engine determines a WLC through which the device connected and if the device connected through the wired connection, the location engine determines a switch through which the device connected. The connection engine connects to the determined WLC if the device connected through the wireless connection and connects to the determined switch if the device connected through the wired connection.