Wireless Network Radio Interface Classification via Dual-Media Sniffer

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Wireless communication in local area networks poses security risks due to unauthorized devices accessing the network through radio waves that cannot be confined within physical boundaries, leading to potential breaches and vulnerabilities.

Innovation Solution

A method and system for classifying radio interfaces in a wireless network using sniffer devices to detect and classify unknown MAC addresses on both wireless and wired media, enabling enforcement of wireless security policies and disruption of undesirable wireless communications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If wireless communication is enabled for convenient network access, then ease of operation is improved, but security risks increase due to unauthorized device access

Engineering Contradiction:

Improvewireless network accessVSAvoidunauthorized device access

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by detecting and classifying radio interfaces before they can access the network. The sniffer device proactively monitors wireless traffic and identifies unknown MAC addresses prior to authentication, allowing the system to prevent unauthorized access before it occurs rather than reacting after security breaches happen.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary security system between the wireless network and authorized devices. The sniffer device and classification system act as intermediaries that intercept and analyze radio interface identifiers (MAC addresses) to determine whether devices are authorized before allowing network access, thus mediating between convenient wireless access and security requirements.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If manual classification of radio interfaces is performed, then security policy enforcement is improved, but device complexity and administrative burden increase

Engineering Contradiction:

Improvesecurity policy enforcementVSAvoidclassification system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system implements self-service by automatically detecting and classifying radio interfaces without requiring manual intervention. The sniffer device autonomously monitors wireless traffic, extracts MAC addresses, and the classification system automatically determines authorization status based on pre-configured policies, eliminating the need for administrators to manually classify each device while maintaining reliable security enforcement.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical classification processes with automated electronic detection and classification systems. Instead of administrators manually identifying and classifying devices, the system uses sniffer devices to automatically detect radio interfaces and electronic classification algorithms to determine authorization, substituting human operational complexity with automated technical systems.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Productivity

If radio interfaces are automatically classified, then productivity is improved, but measurement precision requirements increase

Engineering Contradiction:

Improveclassification processing speedVSAvoidMAC address detection accuracy

Core Design Contradiction:

ProductivityVSMeasurement precision

Solution Approach 1:

The system maintains continuity of useful action by continuously monitoring wireless traffic and constantly updating the classification database. The sniffer device operates continuously to detect MAC addresses, and the classification system continuously processes this information to maintain an up-to-date authorization list, enabling fast automatic classification while maintaining high detection accuracy through continuous operation.

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The classification system incorporates feedback mechanisms where detected MAC addresses are fed back into the classification database for verification and updating. The system uses feedback from continuous monitoring to refine and maintain measurement precision, allowing automatic classification to proceed at high speed while accuracy is maintained through iterative verification and updates of the authorization database.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS7710933B1Method and system for classification of wireless devices in local area computer networks

Publication Date: 2010.05.04 ARISTA NETWORKS INC

AI summary

A method for classifying radio interfaces in a wireless network. The method includes transferring an unknown MAC address associated with a radio interface of a communication device through a wireless medium and detecting the unknown MAC address on the wireless medium using a first sniffer device. The method also includes transferring information through an access point coupled to a wired medium utilizing the radio interface of the wireless communication device. The information includes the unknown MAC address. The method further includes detecting the unknown MAC address on the wired medium using a second sniffer device and classifying the radio interface as an authorized radio interface based upon detecting the unknown MAC address on the wireless medium and detecting the unknown MAC address on the wired medium.