Wireless Network Device Segmentation via Virtual VLANs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In bring-your-own-device (BYOD) environments, connecting computing devices with different trust levels to a network poses a risk, as existing security mechanisms struggle to effectively segment and isolate devices, leading to potential security breaches and unauthorized access.
Innovation Solution
Implementing a method to segment computing devices in a wireless network by configuring virtual networks based on identifiers, allowing only devices with the same identifier to communicate and access each other while isolating them from other virtual networks, using a broadcast domain enforcement layer and firewall layers for security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If computing devices with different trust levels are connected to a network, then network connectivity and accessibility are improved, but security risks and potential breaches increase
Solution Approach 1:
The patent divides the network into separate virtual networks (VLANs) based on device trust levels. High-trust devices are placed in one virtual network while low-trust devices are placed in another, physically segmenting the network to prevent security breaches while maintaining connectivity for authorized devices.
Solution Approach 2:
The patent introduces a virtual network interface card (VNIC) as an intermediary layer between physical network devices and virtual networks. The VNIC manages the mapping between physical devices and virtual networks, enabling secure connectivity while maintaining isolation between different trust levels.
2Object-affected harmful factors
If virtual networks are created to segment devices, then security isolation is improved, but network complexity increases
Solution Approach 1:
The patent implements virtual networks within the framework of existing physical networks, nesting virtual VLANs inside the physical infrastructure. This allows multiple virtual networks to coexist within a single physical network without requiring complete physical redesign, thereby reducing the increase in complexity.
Solution Approach 2:
The virtual network interface card (VNIC) serves multiple functions: it acts as a network adapter, manages virtual network membership, handles security authentication, and coordinates data routing. By consolidating these functions into a single component, the patent reduces overall system complexity while maintaining security isolation.
Data Source
AI summary
Methods and systems of segmenting computing devices in a wireless network having an access point broadcasting in a single domain are described. In an exemplary method, a request to join the wireless network is received from a computing device. The request is associated with an identifier. When the identifier is not associated with a virtual network within the wireless network, a virtual network is configured within the wireless network and the identifier is associated thereto and the computing device is assigned thereto. When the identifier is associated with an existing virtual network within the wireless network, the computing device is assigned to the existing virtual network.