WO2008083339A2 - Application-aware wireless network system and method - Google Patents
Application-aware wireless network system and method Download PDFInfo
- Publication number
- WO2008083339A2 WO2008083339A2 PCT/US2007/089134 US2007089134W WO2008083339A2 WO 2008083339 A2 WO2008083339 A2 WO 2008083339A2 US 2007089134 W US2007089134 W US 2007089134W WO 2008083339 A2 WO2008083339 A2 WO 2008083339A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- software
- boot
- boot image
- software sets
- aps
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/12—Detection or prevention of fraud
- H04W12/121—Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
- H04W12/122—Counter-measures against attacks; Protection against rogue devices
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/08—Access point devices
Definitions
- An access point is a device used by wireless clients to connect to a network.
- An AP functions as a standalone entity in some implementations and functions in cooperation with distribution hardware in other implementations.
- Distribution hardware may include a wireless switch used to manage APs and provide network-connectivity to wireless clients.
- a wireless domain may refer to a group of wireless switches that are configured to exchange relevant information, and using this information make informed decisions.
- a known device is a station (e.g., a wireless AP or client device) that is part of a network wireless installation.
- a rogue device is a station that is considered harmful for a network wireless installation because it is, for example, violating policies or hampering wireless access to the network.
- a traditional approach to rogue detection has been to (1) use a second set of hardware in addition to APs, or (2) provide an integrated network that provides both data services and rogue detection services.
- the advantage of the first approach is that a user can select the best devices for the job, though this often results in higher capital and operational expenditures.
- the second approach saves money by using a single network and point of administration, but the user may have to compromise product feature sets because of the need to use a single vendor.
- a technique for dynamically responding to threats in a wireless network involves deploying a single network including APs capable of booting from a plurality of software images. Individual APs can switch (or be switched) between multiple sets of software so that network managers can select the AP software most appropriate for a given instance. For example, if a threat is detected, multiple APs can be switched to sensor mode to deal with the threat. As another example, all of the APs can be switched to sensor mode after hours. Alternatively, a server can provide the software image(s) needed for an AP to operate in accordance with a desired functionality. [0007]
- the proposed system can offer, among other advantages, improved wireless network functionality. This and other advantages of the techniques described herein will become apparent to those skilled in the art upon a reading of the following descriptions and a study of the several figures of the drawings.
- FIGS. IA and IB depict an example of a system having a plurality of multi- boot access points (APs).
- APs multi- boot access points
- FIGS. 2A, 2B, and 1C depict a wireless domain that includes a plurality of multi-boot APs.
- FIG. 3 depicts an example of a multi-boot AP device.
- FIG. 4 depicts an example of a system for changing bootl statically at an AP.
- FIG. 5 depicts an example of a system for changing bootl dynamically at an AP.
- FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image.
- FIGS. IA and IB depict an example of a system 100 having a plurality of multi-boot access points (APs).
- the system 100 includes distribution system 102, and a plurality of multi-boot APs 104-1 to 104-N (referred to collectively as multi-boot APs 104).
- the system 100 includes a station 110 that is associated, for illustrative purposes, with the multi- boot AP 104-2.
- the station 106 has associated with the multi-boot AP 104-2, the multi-boot AP 104-2 has booted software that enables operation as a traditional AP.
- any of the multi-boot APs 104 can be switched to a different mode by booting different software.
- the multi-boot AP 104-2 becomes aware that the station 106 is a rogue 108.
- the association ends.
- the rogue 108 appears to be disassociated from the multi-boot AP 104-2, the rogue 108 could be detected before an actual association with the multi-boot AP 104-2.
- the determination that the station 106 is the rogue 108 may be made at the distribution system 102, or by some other one or more of the multi-boot APs 104 that are configured in, for example, a sensor mode.
- the multi-boot AP 104-2 can be
- FIGS. 2A, 2B, and 2C depict a wireless domain 200 that includes a plurality of multi-boot APs.
- the wireless domain 200 may include, by way of example but not limitation, a Trapeze Networks, Inc. MOBILITY DOMAINTM wireless domain.
- a Trapeze Networks, Inc. MOBILITY DOMAINTM wireless domain.
- the wireless domain 200 includes a plurality of multi-boot APs 202 configured in network connectivity mode (APs 202) and a plurality of multi-boot APs 204 configured in sensor mode (sensors 204).
- the APs 202 and the sensors 204 are organized in an arbitrary or implementation-specific pattern in the mobility domain 200.
- a rogue 206 is detected in the wireless domain 200.
- an alarm may be generated.
- the alarm can lead to a change in the functionality of the APs 202 and/or sensors 204.
- One example of a change is illustrated in the example of FIG. 2C.
- APs 202 in the vicinity of the rogue 206 are switched to sensors 204.
- the changed sensors are shaded in the example of FIG. 2C.
- the determination as to which APs to change to sensors may depend upon implementation-specific configurations or capabilities. For example, APs may be changed to sensors when a risk score exceeds a threshold value.
- the threshold value may be set, and the risk score may increase based upon activities or events associated with a station, hi
- the number of APs to convert is also either statically or dynamically configurable. For example, the number of APs converted may be based upon the severity of an event that triggers the conversion. In another illustrative embodiment, multiple APs may be converted for other reasons. For example, if at least three APs are in sensor mode, then triangulation may be facilitated. Additional APs may improve the accuracy of a triangulation technique.
- the amount of investigation predicted to be required may have a bearing on the number of APs converted.
- the system may convert APs depending upon the location of the event that triggers the conversion.
- the location of the APs may have a bearing upon the choice of APs to convert.
- the amount of load on an AP may have a bearing on whether the AP is converted. For example, if an AP that has a lot of stations associated with it is selected for conversion to a sensor, it may be decided that the conversion is not worth the disruption of service to the associated stations, if any.
- FIG. 3 depicts an example of a multi-boot AP device 300.
- the device 300 includes memory 302, a processor 304, one or more radios 306- 1, 306-2 (referred to collectively as radios 306), a primary boot 308, one or more supplemental boots 310-1, 310-2 (referred to collectively as supplemental boots 310), one or more network interfaces 312-1, 312-2 (referred to collectively as network interfaces 312), and a bus 314 to which each of the other components are coupled.
- the memory 302 may be primary memory such as random access memory (RAM). Any applicable known or convenient memory may be used.
- the processor 304 may be a central processing
- the radios 306 may be set to work on the same technology/protocol.
- the radios may have different configurations, such as different channel operations or modes.
- the radios 306 may also be set to work on different technology/protocols, such as 802.1 Ia for one and 802.1 lb/g for another. Any known or convenient radio technology may be used.
- the primary boot 308 is embodied in a computer-readable medium.
- the computer-readable medium may include, by way of example but not limitation, flash memory.
- the supplemental boots 310 are embodied in a computer-readable medium, as well.
- the network interfaces 312 may include Ethernet interfaces. However, any applicable known or convenient network interfaces could be used.
- the primary boot 308 is the first boot partition, bootO, and a supplemental boot 310-1 is the second boot partition, bootl.
- the device 300 will first attempt to boot from the bootl. If that fails, or if the bootl partition is marked bad, it will fall back to bootO.
- Trapeze Networks software may be loaded into bootO, and third-party software into bootl. That way, the device 300 will boot under control of third-party software. To switch back, the bootl partition is marked bad, which causes the device 300 to fall back to Trapeze Networks software.
- the Trapeze Networks software is read-only so that the image is always available, but this is an implementation-specific decision. In this
- FIG. 4 depicts an example of a system 400 for changing bootl statically at an AP.
- changing bootl statically refers to making the change by an administrator.
- Dynamically changing bootl on the other hand, which is discussed later with reference to FIG. 5, involves changing bootl in accordance with detected events, a schedule, or other environmental stimuli.
- the system 400 includes a network administrator 402, a management system 404, a switch 406, and an AP 408.
- the network administrator 402 may include a human and/or artificial entity.
- the management system 404 may be embodied in a computer-readable medium and may include, by way of example but not limitation, a TRAPEZE NETWORKS RINGMASTERTM management system.
- the switch 406 may include, by way of example but not limitation, a MOBILITY EXCHANGETM or MX® switch.
- the AP may include a MOBILITY POINTTM or MP® AP.
- the switch 406 includes a primary boot image 410, one or more supplemental boot images 412-1 to 412-N (referred to collectively as the supplemental boot images 412), and an AP configuration database 414.
- the AP 408 includes the primary boot image 410 (bootO) and one of the supplemental boot images 412 (bootl).
- the network administrator 402 may trigger changes to bootl at the AP 408 using the management system 404.
- the control application 404 upon receiving an appropriate command from the network administrator 402 sends a command to the switch 406 to change bootl, as appropriate.
- the network administrator 402 may also enter the appropriate command to the switch 406.
- the network administrator 402 may or may not be able to also change bootO at the AP 408 using CLI or other commands. However, it may be desirable to provide the capability of allowing installation of the primary boot image at installation or re- installation.
- the AP configuration database 414 on the switch 406 is updated to indicate that the AP 408 should use one of the supplemental boot images 412.
- the switch 406 then provides the appropriate boot image of the supplemental boot images 412 to the AP 408, which the AP 408 stores as bootl.
- FIG. 4 depicts components that may be used for static AP boot image installation, in some embodiments it may be desirable to add dynamic AP boot image installation (or switching between boot images at the AP).
- Some examples of events leading to dynamic conversion may include by way of example but not limitation:
- the management system can select an AP based on a policy that includes the strongest signal strength, to pick the "closest" AP, or the least loaded AP, so as to minimize user disruption.
- the management system can manage AP conversions so as to ensure that a minimum set of APs are being used to provide service and prevent service from falling below a threshold. Likewise, the management system can manage the AP pool so that a minimum level of third-party functionality is maintained.
- the management system can assess threat levels based on, for example, a risk- based score so that there is a minimum threshold score for conversion, and progressively higher scores result in conversion of larger numbers of APs to security services.
- the management system can link conversion events to a rollback, so that an AP can be "leased” to a third-party application and reclaimed at the end of a given time duration. It would also be possible for that application to extend its lease.
- FIG. 5 depicts an example of a system 500 for changing boot images dynamically at an AP.
- the system 500 includes a management system 502, one or more third party applications 504-1 to 504-N (referred to collectively as third party applications 504), one or more wireless domains 506-1 to 506-N (referred to collectively as wireless domains 506), a server 508, a switch 510, and an AP 512.
- the third party applications 504 include applications that provide functionality to the server 508 that may be of use in a wireless domain.
- the third party applications 504 may include security applications.
- the wireless domains 506 provide RF data to the server 508.
- the switch 510 may be included in one of the wireless domains 506, and may provide RF data (not shown).
- the server 508 may include an AP selector 514, a scheduler 516, AP images 518, and a command system 520.
- the AP selector 514 can receive requests for conversion from multiple sources and unify them.
- the AP selector 514 may receive input from the third party applications 504, the wireless domains 506 (e.g., in the form of RF data), or from other applicable sources that serve to improve the
- the AP selector 514 may include an engine for making probabilistic assessments of risk prior to image selection.
- the AP selector may initially convert a few APs on the first request from a third-party system, and progressively add more if the situation is not resolved.
- the AP selector 514 after determining a course of action based upon the risk assessment, provides a command to the command system 520.
- the scheduler 516 may include a timer that is set according to implementation-specific parameters.
- the timer may be associated with a running time between conversion of APs, times when an enterprise is open (e.g., switching to network connectivity mode during work hours), or some other schedule.
- the scheduler 516 provides a command to the command system 520 based upon the configured schedule(s).
- the AP images 518 are available to the command system 520. It may be that the AP images 518 are not needed even when an AP image is to be changed.
- the AP 512 may include multiple boot images, including the image to which the switch 510 (as instructed by the command system 520) attempts to switch the AP 512. It may be that the AP images 518 are needed because the AP 512 can only hold a single image (requiring a new image with each AP image change), or because the AP 512 does not include the image that is needed based upon the desired functionality.
- multiple IDS partners may be used for statistical defense against attacks. APs could also be dedicated on-demand to location functions and "spotlighting" particular client devices.
- FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image. This method and other methods are depicted as serially arranged
- the flowchart 600 starts at module 602 where a plurality of software images are provided.
- the software images may be provided at a server or at an AP.
- the flowchart 600 continues to module 604 where a boot image is selected from the plurality of software images.
- the boot image may be selected after a determination is made as to the desired functionality for an AP at a given time. The determination may be based upon, for example, risk assessment, according to a schedule, or to sign a spotlight on a particular station.
- the flowchart 600 continues to module 606 where an AP is booted using the boot image. Then the flowchart 600 ends. Presumably, the AP then operates in accordance with the functionality of the boot image.
- a wireless network refers to any type of wireless network, including but not limited to a structured network or an ad hoc network.
- Data on a wireless network is often encrypted. However, data may also be sent in the clear, if desired. With encrypted data, a rogue device will have a difficult time learning any information (such as passwords, etc.) from clients before countermeasures are taken to deal with the rogue. The rogue may be able to confuse the client, and perhaps obtain some encrypted data, but the risk is minimal (even less than for some wired networks).
- access point refers to receiving points for any known or convenient wireless access technology. Specifically, the term AP is not intended to be limited to 802.11 APs.
- the algorithms and techniques described herein also relate to apparatus for performing the algorithms and techniques.
- This apparatus may be specially constructed for the required purposes, or it may comprise a general purpose computer selectively activated or reconfigured by a computer program stored in the computer. Such a
- DOC 13 computer program may be stored in a computer readable storage medium, such as, but is not limited to, read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic or optical cards, any type of disk including floppy disks, optical disks, CD-ROMs, and magnetic-optical disks, or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus.
- ROMs read-only memories
- RAMs random access memories
- EPROMs EPROMs
- EEPROMs electrically erasable programmable read-only memory
- magnetic or optical cards any type of disk including floppy disks, optical disks, CD-ROMs, and magnetic-optical disks, or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus.
- AP access point
- all wireless access technologies require something comparable (i.e., a node at which wireless communications are received and/or transmitted).
- an independent basic service set includes stations that access the service area by directly communicating with one another; thus, the access nodes are the stations themselves. Accordingly, AP is considered to be generally applicable to any technology, regardless of actual verbiage used to describe a BSS with equivalent functionality.
Abstract
A technique for dynamically responding to threats in a wireless network involves deploying a single network including APs capable of booting from a plurality of software images. Individual APs can switch (or be switched) between multiple sets of software so that network managers can select the AP software most appropriate for a given instance. For example, if a threat is detected, multiple APs can be switched to sensor mode to deal with the threat. As another example, all of the APs can be switched to sensor mode after hours. Alternatively, a server can provide the software image(s) needed for an AP to operate in accordance with a desired functionality.
Description
APPLICATION-AWARE WIRELESS NETWORK SYSTEM AND METHOD
CROSS-REFERENCE TO RELATED APPLICATIONS
[0001] This application claims priority to U.S. Provisional Patent Application No. 60/877,907, filed December 28, 2006, which is hereby incorporated by reference in its entirety.
BACKGROUND
[0002] An access point (AP) is a device used by wireless clients to connect to a network. An AP functions as a standalone entity in some implementations and functions in cooperation with distribution hardware in other implementations. Distribution hardware may include a wireless switch used to manage APs and provide network-connectivity to wireless clients. A wireless domain may refer to a group of wireless switches that are configured to exchange relevant information, and using this information make informed decisions. A known device is a station (e.g., a wireless AP or client device) that is part of a network wireless installation. A rogue device is a station that is considered harmful for a network wireless installation because it is, for example, violating policies or hampering wireless access to the network. [0003] A traditional approach to rogue detection has been to (1) use a second set of hardware in addition to APs, or (2) provide an integrated network that provides both data services and rogue detection services. The advantage of the first approach is that a user can select the best devices for the job, though this often results in higher capital and operational expenditures. The second approach saves money by using a single network and point of administration, but the user may have to compromise product feature sets because of the need to use a single vendor.
13837061 l.DOC 1
[0004] These are but a subset of the problems and issues associated with wireless access point authentication, and are intended to characterize weaknesses in the prior art by way of example. The foregoing examples of the related art and limitations related therewith are intended to be illustrative and not exclusive. Other limitations of the related art will become apparent to those of skill in the art upon a reading of the specification and a study of the drawings.
SUMMARY
[0005] The following embodiments and aspects thereof are described and illustrated in conjunction with systems, tools, and methods that are meant to be exemplary and illustrative, not limiting in scope. In various embodiments, one or more of the above- described problems have been reduced or eliminated, while other embodiments are directed to other improvements.
[0006] A technique for dynamically responding to threats in a wireless network involves deploying a single network including APs capable of booting from a plurality of software images. Individual APs can switch (or be switched) between multiple sets of software so that network managers can select the AP software most appropriate for a given instance. For example, if a threat is detected, multiple APs can be switched to sensor mode to deal with the threat. As another example, all of the APs can be switched to sensor mode after hours. Alternatively, a server can provide the software image(s) needed for an AP to operate in accordance with a desired functionality. [0007] The proposed system can offer, among other advantages, improved wireless network functionality. This and other advantages of the techniques described herein will become apparent to those skilled in the art upon a reading of the following descriptions and a study of the several figures of the drawings.
13837061 l.DOC 2
BRIEF DESCRIPTION OF THE DRAWINGS
[0008] Embodiments of the invention are illustrated in the figures. However, the embodiments and figures are illustrative rather than limiting; they provide examples of the invention.
[0009] FIGS. IA and IB depict an example of a system having a plurality of multi- boot access points (APs).
[0010] FIGS. 2A, 2B, and 1C depict a wireless domain that includes a plurality of multi-boot APs.
[0011] FIG. 3 depicts an example of a multi-boot AP device.
[0012] FIG. 4 depicts an example of a system for changing bootl statically at an AP. [0013] FIG. 5 depicts an example of a system for changing bootl dynamically at an AP.
[0014] FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image.
13S37061 l.DOC
DETAILED DESCRIPTION
[0015] In the following description, several specific details are presented to provide a thorough understanding of embodiments of the invention. One skilled in the relevant art will recognize, however, that the invention can be practiced without one or more of the specific details, or in combination with other components, etc. In other instances, well-known implementations or operations are not shown or described in detail to avoid obscuring aspects of various embodiments, of the invention. [0016] FIGS. IA and IB depict an example of a system 100 having a plurality of multi-boot access points (APs). In the example of FIGS. IA and IB, the system 100 includes distribution system 102, and a plurality of multi-boot APs 104-1 to 104-N (referred to collectively as multi-boot APs 104). In the example of FIG. IA, the system 100 includes a station 110 that is associated, for illustrative purposes, with the multi- boot AP 104-2. Presumably, since the station 106 has associated with the multi-boot AP 104-2, the multi-boot AP 104-2 has booted software that enables operation as a traditional AP. However, any of the multi-boot APs 104 can be switched to a different mode by booting different software.
[0017] In the example of FIG. IB, the multi-boot AP 104-2 becomes aware that the station 106 is a rogue 108. When the multi-boot AP 104-2 becomes aware of the rogue 108, the association ends. Although in the example of FIG. IB the rogue 108 appears to be disassociated from the multi-boot AP 104-2, the rogue 108 could be detected before an actual association with the multi-boot AP 104-2.
[0018] The determination that the station 106 is the rogue 108 may be made at the distribution system 102, or by some other one or more of the multi-boot APs 104 that are configured in, for example, a sensor mode. The multi-boot AP 104-2 can be
13S37O61 l.DOC 4
rebooted with different software that gives the multi-boot 104-2, e.g., sensor functionality to help deal with the rogue 108 with, e.g., countermeasures. In an illustrative embodiment, when the multi-boot AP 104-2 is in sensor mode, no association is possible. Some of the advantages of the system 100 are explored later. [0019] FIGS. 2A, 2B, and 2C depict a wireless domain 200 that includes a plurality of multi-boot APs. The wireless domain 200 may include, by way of example but not limitation, a Trapeze Networks, Inc. MOBILITY DOMAIN™ wireless domain. In the example of FIG. 2A, the wireless domain 200 includes a plurality of multi-boot APs 202 configured in network connectivity mode (APs 202) and a plurality of multi-boot APs 204 configured in sensor mode (sensors 204). The APs 202 and the sensors 204 are organized in an arbitrary or implementation-specific pattern in the mobility domain 200.
[0020] In the example of FIG. 2B, a rogue 206 is detected in the wireless domain 200. When the rogue 206 is detected, an alarm may be generated. The alarm can lead to a change in the functionality of the APs 202 and/or sensors 204. One example of a change is illustrated in the example of FIG. 2C.
[0021] In the example of FIG. 2C, APs 202 in the vicinity of the rogue 206 are switched to sensors 204. For illustrative purposes, the changed sensors are shaded in the example of FIG. 2C. In an illustrative embodiment, the determination as to which APs to change to sensors may depend upon implementation-specific configurations or capabilities. For example, APs may be changed to sensors when a risk score exceeds a threshold value.
[0022] In another illustrative embodiment, the threshold value may be set, and the risk score may increase based upon activities or events associated with a station, hi
13837061 1 DOC
another illustrative embodiment, the number of APs to convert is also either statically or dynamically configurable. For example, the number of APs converted may be based upon the severity of an event that triggers the conversion. In another illustrative embodiment, multiple APs may be converted for other reasons. For example, if at least three APs are in sensor mode, then triangulation may be facilitated. Additional APs may improve the accuracy of a triangulation technique.
[0023] In another illustrative embodiment, the amount of investigation predicted to be required may have a bearing on the number of APs converted. In another illustrative embodiment, the system may convert APs depending upon the location of the event that triggers the conversion. In another illustrative embodiment, the location of the APs may have a bearing upon the choice of APs to convert. In another illustrative embodiment, the amount of load on an AP may have a bearing on whether the AP is converted. For example, if an AP that has a lot of stations associated with it is selected for conversion to a sensor, it may be decided that the conversion is not worth the disruption of service to the associated stations, if any.
[0024] FIG. 3 depicts an example of a multi-boot AP device 300. In the example of FIG. 3, the device 300 includes memory 302, a processor 304, one or more radios 306- 1, 306-2 (referred to collectively as radios 306), a primary boot 308, one or more supplemental boots 310-1, 310-2 (referred to collectively as supplemental boots 310), one or more network interfaces 312-1, 312-2 (referred to collectively as network interfaces 312), and a bus 314 to which each of the other components are coupled. [0025] In an illustrative embodiment, the memory 302 may be primary memory such as random access memory (RAM). Any applicable known or convenient memory may be used. In an illustrative embodiment, the processor 304 may be a central processing
13837061 1 DOC
unit (CPU), a microprocessor, or some other processor capable of executing code stored in the memory 302. Any applicable known or convenient processor may be used. In an illustrative embodiment, the radios 306 may be set to work on the same technology/protocol. The radios may have different configurations, such as different channel operations or modes. The radios 306 may also be set to work on different technology/protocols, such as 802.1 Ia for one and 802.1 lb/g for another. Any known or convenient radio technology may be used.
[0026] hi an illustrative embodiment, the primary boot 308 is embodied in a computer-readable medium. The computer-readable medium may include, by way of example but not limitation, flash memory. In an illustrative embodiment, the supplemental boots 310 are embodied in a computer-readable medium, as well. In an illustrative embodiment, the network interfaces 312 may include Ethernet interfaces. However, any applicable known or convenient network interfaces could be used. [0027] In an illustrative embodiment that has two boot partitions, bootO and bootl, the primary boot 308 is the first boot partition, bootO, and a supplemental boot 310-1 is the second boot partition, bootl. (In this illustrative embodiment, there is only one supplemental boot.) The device 300 will first attempt to boot from the bootl. If that fails, or if the bootl partition is marked bad, it will fall back to bootO. [0028] In a specific implementation, Trapeze Networks software may be loaded into bootO, and third-party software into bootl. That way, the device 300 will boot under control of third-party software. To switch back, the bootl partition is marked bad, which causes the device 300 to fall back to Trapeze Networks software. In at least one implementation, the Trapeze Networks software is read-only so that the image is always available, but this is an implementation-specific decision. In this
13837061 l.DOC
implementation, only one third-party software image is provided in bootl, but it can be swapped out for another image.
[0029] FIG. 4 depicts an example of a system 400 for changing bootl statically at an AP. As used herein, changing bootl statically refers to making the change by an administrator. Dynamically changing bootl on the other hand, which is discussed later with reference to FIG. 5, involves changing bootl in accordance with detected events, a schedule, or other environmental stimuli.
[0030] In the example of FIG. 4, the system 400 includes a network administrator 402, a management system 404, a switch 406, and an AP 408. The network administrator 402 may include a human and/or artificial entity. The management system 404 may be embodied in a computer-readable medium and may include, by way of example but not limitation, a TRAPEZE NETWORKS RINGMASTER™ management system. The switch 406 may include, by way of example but not limitation, a MOBILITY EXCHANGE™ or MX® switch. The AP may include a MOBILITY POINT™ or MP® AP.
[0031] In the example of FIG. 4, the switch 406 includes a primary boot image 410, one or more supplemental boot images 412-1 to 412-N (referred to collectively as the supplemental boot images 412), and an AP configuration database 414. The AP 408 includes the primary boot image 410 (bootO) and one of the supplemental boot images 412 (bootl).
[0032] In the example of FIG. 4, in operation, the network administrator 402 may trigger changes to bootl at the AP 408 using the management system 404. The control application 404, upon receiving an appropriate command from the network administrator 402 sends a command to the switch 406 to change bootl, as appropriate.
13837061 l.DOC
The network administrator 402 may also enter the appropriate command to the switch 406. The network administrator 402 may or may not be able to also change bootO at the AP 408 using CLI or other commands. However, it may be desirable to provide the capability of allowing installation of the primary boot image at installation or re- installation.
[0033] When the command is received at the switch 406, the AP configuration database 414 on the switch 406 is updated to indicate that the AP 408 should use one of the supplemental boot images 412. The switch 406 then provides the appropriate boot image of the supplemental boot images 412 to the AP 408, which the AP 408 stores as bootl.
[0034] While the example of FIG. 4 depicts components that may be used for static AP boot image installation, in some embodiments it may be desirable to add dynamic AP boot image installation (or switching between boot images at the AP). Some examples of events leading to dynamic conversion may include by way of example but not limitation:
• Automatic conversion of an AP to an IDS sensor based on an alarm.
• Automatic conversion of all APs to IDS sensors based on time, so that the entire wireless network stops offering service when the facility closes and instead runs an intrusion detection application. The conversion would be reversed when the facility reopens so that service is again provided to users.
• By automating the conversion in a management system, it may be possible to select the "best" AP for conversion. In the case of a rogue, it will likely be detected by several APs. In an illustrative embodiment, the management system can select an AP based on a policy that includes the strongest signal strength, to pick the "closest" AP, or the least loaded AP, so as to minimize user disruption.
13837061 l.DOC 9
• The management system can manage AP conversions so as to ensure that a minimum set of APs are being used to provide service and prevent service from falling below a threshold. Likewise, the management system can manage the AP pool so that a minimum level of third-party functionality is maintained.
• The management system can assess threat levels based on, for example, a risk- based score so that there is a minimum threshold score for conversion, and progressively higher scores result in conversion of larger numbers of APs to security services.
• The management system can link conversion events to a rollback, so that an AP can be "leased" to a third-party application and reclaimed at the end of a given time duration. It would also be possible for that application to extend its lease.
[0035] FIG. 5 depicts an example of a system 500 for changing boot images dynamically at an AP. The system 500 includes a management system 502, one or more third party applications 504-1 to 504-N (referred to collectively as third party applications 504), one or more wireless domains 506-1 to 506-N (referred to collectively as wireless domains 506), a server 508, a switch 510, and an AP 512. [0036] The third party applications 504 include applications that provide functionality to the server 508 that may be of use in a wireless domain. For example, the third party applications 504 may include security applications. The wireless domains 506 provide RF data to the server 508. It should be noted that the switch 510 may be included in one of the wireless domains 506, and may provide RF data (not shown). [0037] The server 508 may include an AP selector 514, a scheduler 516, AP images 518, and a command system 520. The AP selector 514 can receive requests for conversion from multiple sources and unify them. For example, the AP selector 514 may receive input from the third party applications 504, the wireless domains 506 (e.g., in the form of RF data), or from other applicable sources that serve to improve the
13837061 I DOC 10
accuracy of the AP selector 514 (not shown). The AP selector 514 may include an engine for making probabilistic assessments of risk prior to image selection. The AP selector may initially convert a few APs on the first request from a third-party system, and progressively add more if the situation is not resolved. The AP selector 514, after determining a course of action based upon the risk assessment, provides a command to the command system 520.
[0038] The scheduler 516 may include a timer that is set according to implementation-specific parameters. For example, the timer may be associated with a running time between conversion of APs, times when an enterprise is open (e.g., switching to network connectivity mode during work hours), or some other schedule. The scheduler 516 provides a command to the command system 520 based upon the configured schedule(s).
[0039] The AP images 518 are available to the command system 520. It may be that the AP images 518 are not needed even when an AP image is to be changed. For example, the AP 512 may include multiple boot images, including the image to which the switch 510 (as instructed by the command system 520) attempts to switch the AP 512. It may be that the AP images 518 are needed because the AP 512 can only hold a single image (requiring a new image with each AP image change), or because the AP 512 does not include the image that is needed based upon the desired functionality. [0040] Using techniques described herein, multiple IDS partners may be used for statistical defense against attacks. APs could also be dedicated on-demand to location functions and "spotlighting" particular client devices.
[0041] FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image. This method and other methods are depicted as serially arranged
13837061 1 DOC 1 1
modules. However, modules of the methods may be reordered, or arranged for parallel execution as appropriate. In the example of FIG. 6, the flowchart 600 starts at module 602 where a plurality of software images are provided. The software images may be provided at a server or at an AP.
[0042] In the example of FIG. 6, the flowchart 600 continues to module 604 where a boot image is selected from the plurality of software images. The boot image may be selected after a determination is made as to the desired functionality for an AP at a given time. The determination may be based upon, for example, risk assessment, according to a schedule, or to sign a spotlight on a particular station. [0043] In the example of FIG. 6, the flowchart 600 continues to module 606 where an AP is booted using the boot image. Then the flowchart 600 ends. Presumably, the AP then operates in accordance with the functionality of the boot image. [0044] As used herein, a wireless network refers to any type of wireless network, including but not limited to a structured network or an ad hoc network. Data on a wireless network is often encrypted. However, data may also be sent in the clear, if desired. With encrypted data, a rogue device will have a difficult time learning any information (such as passwords, etc.) from clients before countermeasures are taken to deal with the rogue. The rogue may be able to confuse the client, and perhaps obtain some encrypted data, but the risk is minimal (even less than for some wired networks). [0045] As used herein, access point (AP) refers to receiving points for any known or convenient wireless access technology. Specifically, the term AP is not intended to be limited to 802.11 APs.
[0046] Some portions of the detailed description are presented in terms of algorithms and symbolic representations of operations on data bits within a computer memory.
13837061 I DOC 12
These algorithmic descriptions and representations are the means used by those skilled in the data processing arts to most effectively convey the substance of their work to others skilled in the art. An algorithm is here, and generally, conceived to be a self- consistent sequence of operations leading to a desired result. The operations are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical or magnetic signals capable of being stored, transferred, combined, compared, and otherwise manipulated. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like. [0047] It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities. Unless specifically stated otherwise as apparent from the following discussion, it is appreciated that throughout the description, discussions utilizing terms such as "processing" or "computing" or "calculating" or "determining" or "displaying" or the like, refer to the action and processes of a computer system, or similar electronic computing device, that manipulates and transforms data represented as physical (electronic) quantities within the computer system's registers and memories into other data similarly represented as physical quantities within the computer system memories or registers or other such information storage, transmission or display devices.
[0048] The algorithms and techniques described herein also relate to apparatus for performing the algorithms and techniques. This apparatus may be specially constructed for the required purposes, or it may comprise a general purpose computer selectively activated or reconfigured by a computer program stored in the computer. Such a
13837061 l.DOC 13
computer program may be stored in a computer readable storage medium, such as, but is not limited to, read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic or optical cards, any type of disk including floppy disks, optical disks, CD-ROMs, and magnetic-optical disks, or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus. [0049] It should be noted that not all technologies include the term AP in the literature. For example, SGSN technology does not refer to an access point as an 1AP." However, all wireless access technologies require something comparable (i.e., a node at which wireless communications are received and/or transmitted). For example, an independent basic service set (BSS) includes stations that access the service area by directly communicating with one another; thus, the access nodes are the stations themselves. Accordingly, AP is considered to be generally applicable to any technology, regardless of actual verbiage used to describe a BSS with equivalent functionality.
[0050] As used herein, the term "embodiment" means an embodiment that serves to illustrate by way of example but not limitation.
[0051] It will be appreciated to those skilled in the art that the preceding examples and embodiments are exemplary and not limiting to the scope of the present invention. It is intended that all permutations, enhancements, equivalents, and improvements thereto that are apparent to those skilled in the art upon a reading of the specification and a study of the drawings are included within the true spirit and scope of the present invention. It is therefore intended that the following appended claims include all such modifications, permutations and equivalents as fall within the true spirit and scope of the present invention.
13837061 l.DOC 14
Claims
1. A device comprising: a plurality of software images embodied in a computer-readable medium; a management interface through which one of the plurality of software images is designated as a boot image; a processor that implements the boot image in a boot procedure; radio hardware through which functionality associated with the boot image is applied to a wireless domain.
2. The device of claim 1, wherein the plurality of software sets include a primary software set and one or more subordinate software sets.
3. The device of claim 1, wherein at least one of the software sets is associated with wireless network connectivity.
4. The device of claim 1, wherein at least one of the software sets is associated with wireless network security.
5. The device of claim 1, further comprising an interface through which new software images may be received.
6. The device of claim 1, wherein the management interface is implemented using XML.
7. A system comprising: an access point (AP), including a management interface, capable of booting from a plurality of software sets; a management engine embodied in a computer-readable medium; wherein, in operation, the management engine selects one of the plurality of software sets with which the AP boots through the management interface of the AP.
8. The system of claim 7, wherein the plurality of software sets include a primary software set and one or more subordinate software sets.
13837061 I DOC 15
9. The system of claim 7, wherein at least one of the software sets is associated with wireless network connectivity.
10. The system of claim 7, wherein at least one of the software sets is associated with wireless network security.
11. The system of claim 7, wherein, in operation, the management engine receives a selection from an administrator and selects the one of the plurality of software sets in accordance with the selection.
12. The system of claim 7, wherein, in operation, the management engine dynamically selects the one of the plurality of software sets.
13. The system of claim 7, wherein, in operation, the management engine uses time of day to select the one of the plurality of software sets.
14. The system of claim 7, wherein, in operation, the management engine prevents observed devices from obtaining wireless connectivity at particular times of day.
15. The system of claim 7, wherein, in operation, the management engine selects the one of the plurality of software sets to enable more detailed investigation of an event.
16. The system of claim 7, further comprising an independent management system, wherein the management engine is included in the independent management system.
17. A method comprising: providing a plurality of software images; selecting a boot image from the plurality of software images; booting an access point (AP) using the boot image.
18. The method of claim 17, further comprising selecting the boot image according to time of day.
19. The method of claim 17, further comprising selecting the boot image to investigate an event.
13837061 I DOC 16
20. The method of claim 17, wherein the boot image is a first boot image, further comprising: setting a risk threshold; assigning a risk score based upon events in a wireless environment; selecting a second boot image from the plurality of software images if the risk score exceeds the risk threshold.
13837061 l.DOC 17
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US87790706P | 2006-12-28 | 2006-12-28 | |
US60/877,907 | 2006-12-28 |
Publications (2)
Publication Number | Publication Date |
---|---|
WO2008083339A2 true WO2008083339A2 (en) | 2008-07-10 |
WO2008083339A3 WO2008083339A3 (en) | 2008-10-09 |
Family
ID=39585731
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2007/089134 WO2008083339A2 (en) | 2006-12-28 | 2007-12-28 | Application-aware wireless network system and method |
Country Status (2)
Country | Link |
---|---|
US (1) | US7865713B2 (en) |
WO (1) | WO2008083339A2 (en) |
Families Citing this family (32)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1867094A2 (en) | 2005-03-15 | 2007-12-19 | Trapeze Networks, Inc. | System and method for distributing keys in a wireless network |
US8638762B2 (en) * | 2005-10-13 | 2014-01-28 | Trapeze Networks, Inc. | System and method for network integrity |
WO2007044986A2 (en) | 2005-10-13 | 2007-04-19 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
US7551619B2 (en) * | 2005-10-13 | 2009-06-23 | Trapeze Networks, Inc. | Identity-based networking |
US7573859B2 (en) * | 2005-10-13 | 2009-08-11 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
US7724703B2 (en) * | 2005-10-13 | 2010-05-25 | Belden, Inc. | System and method for wireless network monitoring |
US7558266B2 (en) | 2006-05-03 | 2009-07-07 | Trapeze Networks, Inc. | System and method for restricting network access using forwarding databases |
US8966018B2 (en) * | 2006-05-19 | 2015-02-24 | Trapeze Networks, Inc. | Automated network device configuration and network deployment |
US7577453B2 (en) | 2006-06-01 | 2009-08-18 | Trapeze Networks, Inc. | Wireless load balancing across bands |
US7912982B2 (en) | 2006-06-09 | 2011-03-22 | Trapeze Networks, Inc. | Wireless routing selection system and method |
US9258702B2 (en) | 2006-06-09 | 2016-02-09 | Trapeze Networks, Inc. | AP-local dynamic switching |
US9191799B2 (en) | 2006-06-09 | 2015-11-17 | Juniper Networks, Inc. | Sharing data between wireless switches system and method |
US8818322B2 (en) | 2006-06-09 | 2014-08-26 | Trapeze Networks, Inc. | Untethered access point mesh system and method |
US7724704B2 (en) | 2006-07-17 | 2010-05-25 | Beiden Inc. | Wireless VLAN system and method |
US8340110B2 (en) * | 2006-09-15 | 2012-12-25 | Trapeze Networks, Inc. | Quality of service provisioning for wireless networks |
US8072952B2 (en) | 2006-10-16 | 2011-12-06 | Juniper Networks, Inc. | Load balancing |
US7974235B2 (en) * | 2006-11-13 | 2011-07-05 | Telecommunication Systems, Inc. | Secure location session manager |
US20080151844A1 (en) * | 2006-12-20 | 2008-06-26 | Manish Tiwari | Wireless access point authentication system and method |
US7873061B2 (en) | 2006-12-28 | 2011-01-18 | Trapeze Networks, Inc. | System and method for aggregation and queuing in a wireless network |
US20080226075A1 (en) * | 2007-03-14 | 2008-09-18 | Trapeze Networks, Inc. | Restricted services for wireless stations |
US20080276303A1 (en) * | 2007-05-03 | 2008-11-06 | Trapeze Networks, Inc. | Network Type Advertising |
US8902904B2 (en) * | 2007-09-07 | 2014-12-02 | Trapeze Networks, Inc. | Network assignment based on priority |
US8238942B2 (en) * | 2007-11-21 | 2012-08-07 | Trapeze Networks, Inc. | Wireless station location detection |
US8150357B2 (en) | 2008-03-28 | 2012-04-03 | Trapeze Networks, Inc. | Smoothing filter for irregular update intervals |
US8474023B2 (en) | 2008-05-30 | 2013-06-25 | Juniper Networks, Inc. | Proactive credential caching |
US8978105B2 (en) | 2008-07-25 | 2015-03-10 | Trapeze Networks, Inc. | Affirming network relationships and resource access via related networks |
US8238298B2 (en) * | 2008-08-29 | 2012-08-07 | Trapeze Networks, Inc. | Picking an optimal channel for an access point in a wireless network |
US10536871B2 (en) * | 2017-06-30 | 2020-01-14 | Cisco Technology, Inc. | Radio sensor coverage estimation for wireless network assurance |
US11368555B2 (en) | 2018-04-27 | 2022-06-21 | Hewlett Packard Enterprise Development Lp | Convert a device to a corresponding device according to seed image |
US10911131B1 (en) * | 2019-09-12 | 2021-02-02 | Cisco Technology, Inc. | Hybrid relay for high density venues |
US11451552B2 (en) * | 2020-06-04 | 2022-09-20 | Hewlett Packard Enterprise Development Lp | Basic service set (BSS) color-based containment and mitigation |
US11824884B2 (en) | 2020-10-05 | 2023-11-21 | Bank Of America Corporation | System for generating responsive actions based on unauthorized access events associated with imitation networks |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5872968A (en) * | 1996-10-16 | 1999-02-16 | International Business Machines Corporation | Data processing network with boot process using multiple servers |
US20050273442A1 (en) * | 2004-05-21 | 2005-12-08 | Naftali Bennett | System and method of fraud reduction |
US20060200862A1 (en) * | 2005-03-03 | 2006-09-07 | Cisco Technology, Inc. | Method and apparatus for locating rogue access point switch ports in a wireless network related patent applications |
Family Cites Families (249)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4176316A (en) | 1953-03-30 | 1979-11-27 | International Telephone & Telegraph Corp. | Secure single sideband communication system using modulated noise subcarrier |
US3641433A (en) | 1969-06-09 | 1972-02-08 | Us Air Force | Transmitted reference synchronization system |
FR2386211A1 (en) | 1977-03-31 | 1978-10-27 | Europ Teletransmission | DIGITAL COMMUNICATION SYSTEM |
US4291409A (en) | 1978-06-20 | 1981-09-22 | The Mitre Corporation | Spread spectrum communications method and apparatus |
CH622661B (en) | 1978-11-30 | Ebauches Bettlach Sa | DEVICE FOR FIXING A WATCHMAKING DIAL ON THE PLATE OF A WATCH MOVEMENT. | |
US4247908A (en) | 1978-12-08 | 1981-01-27 | Motorola, Inc. | Re-linked portable data terminal controller system |
US4730340A (en) | 1980-10-31 | 1988-03-08 | Harris Corp. | Programmable time invariant coherent spread symbol correlator |
US4503533A (en) | 1981-08-20 | 1985-03-05 | Stanford University | Local area communication network utilizing a round robin access scheme with improved channel utilization |
US4500987A (en) | 1981-11-24 | 1985-02-19 | Nippon Electric Co., Ltd. | Loop transmission system |
US4475208A (en) | 1982-01-18 | 1984-10-02 | Ricketts James A | Wired spread spectrum data communication system |
US4673805A (en) | 1982-01-25 | 1987-06-16 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable scanning head for reading bar code symbols |
US4736095A (en) | 1982-01-25 | 1988-04-05 | Symbol Technologies, Inc. | Narrow-bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols |
US4460120A (en) | 1982-01-25 | 1984-07-17 | Symbol Technologies, Inc. | Narrow bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols |
US4758717A (en) | 1982-01-25 | 1988-07-19 | Symbol Technologies, Inc. | Narrow-bodied, single-and twin-windowed portable laser scanning head for reading bar code symbols |
US4409470A (en) | 1982-01-25 | 1983-10-11 | Symbol Technologies, Inc. | Narrow-bodied, single-and twin-windowed portable laser scanning head for reading bar code symbols |
US4494238A (en) | 1982-06-30 | 1985-01-15 | Motorola, Inc. | Multiple channel data link system |
US4550414A (en) | 1983-04-12 | 1985-10-29 | Charles Stark Draper Laboratory, Inc. | Spread spectrum adaptive code tracker |
US4707839A (en) | 1983-09-26 | 1987-11-17 | Harris Corporation | Spread spectrum correlator for recovering CCSK data from a PN spread MSK waveform |
US4644523A (en) | 1984-03-23 | 1987-02-17 | Sangamo Weston, Inc. | System for improving signal-to-noise ratio in a direct sequence spread spectrum signal receiver |
US4562415A (en) | 1984-06-22 | 1985-12-31 | Motorola, Inc. | Universal ultra-precision PSK modulator with time multiplexed modes of varying modulation types |
US4630264A (en) | 1984-09-21 | 1986-12-16 | Wah Benjamin W | Efficient contention-resolution protocol for local multiaccess networks |
US4639914A (en) | 1984-12-06 | 1987-01-27 | At&T Bell Laboratories | Wireless PBX/LAN system with optimum combining |
JPH0693670B2 (en) | 1984-12-29 | 1994-11-16 | 京セラ株式会社 | Spread spectrum communication system |
US4635221A (en) | 1985-01-18 | 1987-01-06 | Allied Corporation | Frequency multiplexed convolver communication system |
US4672658A (en) | 1985-10-16 | 1987-06-09 | At&T Company And At&T Bell Laboratories | Spread spectrum wireless PBX |
US4850009A (en) | 1986-05-12 | 1989-07-18 | Clinicom Incorporated | Portable handheld terminal including optical bar code reader and electromagnetic transceiver means for interactive wireless communication with a base communications station |
IL82561A (en) | 1986-05-27 | 1991-12-15 | Fairchild Weston Systems Inc | Secure communication system for multiple remote units |
US4740792A (en) | 1986-08-27 | 1988-04-26 | Hughes Aircraft Company | Vehicle location system |
US4901307A (en) | 1986-10-17 | 1990-02-13 | Qualcomm, Inc. | Spread spectrum multiple access communication system using satellite or terrestrial repeaters |
US4995053A (en) | 1987-02-11 | 1991-02-19 | Hillier Technologies Limited Partnership | Remote control system, components and methods |
US4789983A (en) | 1987-03-05 | 1988-12-06 | American Telephone And Telegraph Company, At&T Bell Laboratories | Wireless network for wideband indoor communications |
JPH0671241B2 (en) | 1987-09-10 | 1994-09-07 | 株式会社ケンウッド | Initial synchronization method for spread spectrum communication |
US4894842A (en) | 1987-10-15 | 1990-01-16 | The Charles Stark Draper Laboratory, Inc. | Precorrelation digital spread spectrum receiver |
US4872182A (en) | 1988-03-08 | 1989-10-03 | Harris Corporation | Frequency management system for use in multistation H.F. communication network |
FR2629931B1 (en) | 1988-04-08 | 1991-01-25 | Lmt Radio Professionelle | ASYNCHRONOUS DIGITAL CORRELATOR AND DEMODULATORS COMPRISING SUCH A CORRELATOR |
US5483676A (en) | 1988-08-04 | 1996-01-09 | Norand Corporation | Mobile radio data communication system and method |
US5103461A (en) | 1989-06-29 | 1992-04-07 | Symbol Technologies, Inc. | Signal quality measure in packet data communication |
US5280498A (en) | 1989-06-29 | 1994-01-18 | Symbol Technologies, Inc. | Packet data communication system |
US5142550A (en) | 1989-06-29 | 1992-08-25 | Symbol Technologies, Inc. | Packet data communication system |
US5029183A (en) | 1989-06-29 | 1991-07-02 | Symbol Technologies, Inc. | Packet data communication network |
US5157687A (en) | 1989-06-29 | 1992-10-20 | Symbol Technologies, Inc. | Packet data communication network |
US5528621A (en) | 1989-06-29 | 1996-06-18 | Symbol Technologies, Inc. | Packet data communication system |
US5668803A (en) | 1989-06-29 | 1997-09-16 | Symbol Technologies, Inc. | Protocol for packet data communication system |
US5815811A (en) | 1989-06-29 | 1998-09-29 | Symbol Technologies, Inc. | Preemptive roaming in a cellular local area wireless network |
JP2660441B2 (en) | 1989-07-03 | 1997-10-08 | 双葉電子工業 株式会社 | Receiver for spread spectrum communication |
US5109390A (en) | 1989-11-07 | 1992-04-28 | Qualcomm Incorporated | Diversity receiver in a cdma cellular telephone system |
US5187575A (en) | 1989-12-29 | 1993-02-16 | Massachusetts Institute Of Technology | Source adaptive television system |
US5103459B1 (en) | 1990-06-25 | 1999-07-06 | Qualcomm Inc | System and method for generating signal waveforms in a cdma cellular telephone system |
US5231633A (en) | 1990-07-11 | 1993-07-27 | Codex Corporation | Method for prioritizing, selectively discarding, and multiplexing differing traffic type fast packets |
US5584048A (en) | 1990-08-17 | 1996-12-10 | Motorola, Inc. | Beacon based packet radio standby energy saver |
US5151919A (en) | 1990-12-17 | 1992-09-29 | Ericsson-Ge Mobile Communications Holding Inc. | Cdma subtractive demodulation |
TW327488U (en) | 1991-05-29 | 1998-02-21 | Video Tech Eng | Digital cordless telephone apparatus |
FI100043B (en) | 1992-01-23 | 1997-08-29 | Nokia Telecommunications Oy | Cellular radio network design method and system |
US5267261A (en) | 1992-03-05 | 1993-11-30 | Qualcomm Incorporated | Mobile station assisted soft handoff in a CDMA cellular communications system |
US5896561A (en) | 1992-04-06 | 1999-04-20 | Intermec Ip Corp. | Communication network having a dormant polling protocol |
US5418812A (en) | 1992-06-26 | 1995-05-23 | Symbol Technologies, Inc. | Radio network initialization method and apparatus |
US5285494A (en) | 1992-07-31 | 1994-02-08 | Pactel Corporation | Network management system |
GB9223890D0 (en) | 1992-11-13 | 1993-01-06 | Ncr Int Inc | Wireless local area network system |
US5465401A (en) | 1992-12-15 | 1995-11-07 | Texas Instruments Incorporated | Communication system and methods for enhanced information transfer |
GB9304636D0 (en) | 1993-03-06 | 1993-04-21 | Ncr Int Inc | A method of accessing a communication system |
US5568513A (en) | 1993-05-11 | 1996-10-22 | Ericsson Inc. | Standby power savings with cumulative parity check in mobile phones |
CA2164597A1 (en) | 1993-06-07 | 1994-12-22 | Duncan Hartley Tate | Communication system |
DE4326749C2 (en) | 1993-08-05 | 1995-05-04 | Klaus Dr Ing Jaeckel | Local ISDN radio transmission system |
US5491644A (en) | 1993-09-07 | 1996-02-13 | Georgia Tech Research Corporation | Cell engineering tool and methods |
US5598532A (en) | 1993-10-21 | 1997-01-28 | Optimal Networks | Method and apparatus for optimizing computer networks |
US5488569A (en) | 1993-12-20 | 1996-01-30 | At&T Corp. | Application-oriented telecommunication system interface |
US5450615A (en) | 1993-12-22 | 1995-09-12 | At&T Corp. | Prediction of indoor electromagnetic wave propagation for wireless indoor systems |
WO1995019084A1 (en) | 1994-01-05 | 1995-07-13 | Thomson Consumer Electronics, Inc. | Clear channel selection system for a cordless telephone |
WO1995022859A1 (en) | 1994-02-17 | 1995-08-24 | Micrilor, Inc. | A high-data-rate wireless local-area network |
US5594782A (en) | 1994-02-24 | 1997-01-14 | Gte Mobile Communications Service Corporation | Multiple mode personal wireless communications system |
US5655148A (en) | 1994-05-27 | 1997-08-05 | Microsoft Corporation | Method for automatically configuring devices including a network adapter without manual intervention and without prior configuration information |
US5517495A (en) | 1994-12-06 | 1996-05-14 | At&T Corp. | Fair prioritized scheduling in an input-buffered switch |
US5519762A (en) | 1994-12-21 | 1996-05-21 | At&T Corp. | Adaptive power cycling for a cordless telephone |
US5915214A (en) | 1995-02-23 | 1999-06-22 | Reece; Richard W. | Mobile communication service provider selection system |
US5828960A (en) | 1995-03-31 | 1998-10-27 | Motorola, Inc. | Method for wireless communication system planning |
US5630207A (en) | 1995-06-19 | 1997-05-13 | Lucent Technologies Inc. | Methods and apparatus for bandwidth reduction in a two-way paging system |
JP2771478B2 (en) | 1995-06-20 | 1998-07-02 | 静岡日本電気株式会社 | Wireless selective call receiver with display function |
US5649289A (en) | 1995-07-10 | 1997-07-15 | Motorola, Inc. | Flexible mobility management in a two-way messaging system and method therefor |
JPH0936799A (en) | 1995-07-21 | 1997-02-07 | Toshiba Corp | Radio communication equipment |
US5794128A (en) | 1995-09-20 | 1998-08-11 | The United States Of America As Represented By The Secretary Of The Army | Apparatus and processes for realistic simulation of wireless information transport systems |
US5721733A (en) | 1995-10-13 | 1998-02-24 | General Wireless Communications, Inc. | Wireless network access scheme |
US6580700B1 (en) | 1995-10-27 | 2003-06-17 | Symbol Technologies, Inc. | Data rate algorithms for use in wireless local area networks |
US5920821A (en) | 1995-12-04 | 1999-07-06 | Bell Atlantic Network Services, Inc. | Use of cellular digital packet data (CDPD) communications to convey system identification list data to roaming cellular subscriber stations |
US5987062A (en) | 1995-12-15 | 1999-11-16 | Netwave Technologies, Inc. | Seamless roaming for wireless local area networks |
US5838907A (en) | 1996-02-20 | 1998-11-17 | Compaq Computer Corporation | Configuration manager for network devices and an associated method for providing configuration information thereto |
US6118771A (en) | 1996-03-14 | 2000-09-12 | Kabushiki Kaisha Toshiba | System and method for controlling communication |
US5933420A (en) | 1996-04-30 | 1999-08-03 | 3Com Corporation | Method and apparatus for assigning spectrum of a wireless local area network |
US6697415B1 (en) | 1996-06-03 | 2004-02-24 | Broadcom Corporation | Spread spectrum transceiver module utilizing multiple mode transmission |
US6088591A (en) | 1996-06-28 | 2000-07-11 | Aironet Wireless Communications, Inc. | Cellular system hand-off protocol |
JPH1021599A (en) | 1996-06-28 | 1998-01-23 | Matsushita Electric Ind Co Ltd | Magnetic field modulation recording and reproducing method using super resolution recording medium |
US5949988A (en) | 1996-07-16 | 1999-09-07 | Lucent Technologies Inc. | Prediction system for RF power distribution |
US5991817A (en) * | 1996-09-06 | 1999-11-23 | Cisco Systems, Inc. | Apparatus and method for a network router |
US5844900A (en) | 1996-09-23 | 1998-12-01 | Proxim, Inc. | Method and apparatus for optimizing a medium access control protocol |
US5875179A (en) | 1996-10-29 | 1999-02-23 | Proxim, Inc. | Method and apparatus for synchronized communication over wireless backbone architecture |
US6011784A (en) | 1996-12-18 | 2000-01-04 | Motorola, Inc. | Communication system and method using asynchronous and isochronous spectrum for voice and data |
US6240083B1 (en) | 1997-02-25 | 2001-05-29 | Telefonaktiebolaget L.M. Ericsson | Multiple access communication network with combined contention and reservation mode access |
US6078568A (en) | 1997-02-25 | 2000-06-20 | Telefonaktiebolaget Lm Ericsson | Multiple access communication network with dynamic access control |
JPH10261980A (en) | 1997-03-18 | 1998-09-29 | Fujitsu Ltd | Base station unit for radio communication network, communication control method for radio communication network, radio communication network system and radio terminal |
US5987328A (en) | 1997-04-24 | 1999-11-16 | Ephremides; Anthony | Method and device for placement of transmitters in wireless networks |
US6075814A (en) | 1997-05-09 | 2000-06-13 | Broadcom Homenetworking, Inc. | Method and apparatus for reducing signal processing requirements for transmitting packet-based data with a modem |
US5982779A (en) | 1997-05-28 | 1999-11-09 | Lucent Technologies Inc. | Priority access for real-time traffic in contention-based networks |
US6199032B1 (en) | 1997-07-23 | 2001-03-06 | Edx Engineering, Inc. | Presenting an output signal generated by a receiving device in a simulated communication system |
EP0898434B1 (en) | 1997-08-20 | 2004-05-26 | NEC USA, Inc. | ATM switching architecture for a wireless telecommunications network |
US6119009A (en) | 1997-09-18 | 2000-09-12 | Lucent Technologies, Inc. | Method and apparatus for modeling the propagation of wireless signals in buildings |
US5953669A (en) | 1997-12-11 | 1999-09-14 | Motorola, Inc. | Method and apparatus for predicting signal characteristics in a wireless communication system |
US6356758B1 (en) | 1997-12-31 | 2002-03-12 | Nortel Networks Limited | Wireless tools for data manipulation and visualization |
KR100257184B1 (en) | 1998-01-31 | 2000-05-15 | 정장호 | Optic relay system for extending coverage |
US6115385A (en) | 1998-03-11 | 2000-09-05 | Cisco Technology, Inc. | Method and system for subnetting in a switched IP network |
GB9810843D0 (en) | 1998-05-21 | 1998-07-22 | 3Com Technologies Ltd | Method for storing data in network devices |
US6594238B1 (en) | 1998-06-19 | 2003-07-15 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for dynamically adapting a connection state in a mobile communications system |
US6725260B1 (en) | 1998-09-11 | 2004-04-20 | L.V. Partners, L.P. | Method and apparatus for configuring configurable equipment with configuration information received from a remote location |
US6101539A (en) | 1998-10-02 | 2000-08-08 | Kennelly; Richard J. | Dynamic presentation of management objectives based on administrator privileges |
US6160804A (en) | 1998-11-13 | 2000-12-12 | Lucent Technologies Inc. | Mobility management for a multimedia mobile network |
US6336035B1 (en) | 1998-11-19 | 2002-01-01 | Nortel Networks Limited | Tools for wireless network planning |
US6218930B1 (en) | 1999-03-10 | 2001-04-17 | Merlot Communications | Apparatus and method for remotely powering access equipment over a 10/100 switched ethernet network |
US6614787B1 (en) | 1999-03-30 | 2003-09-02 | 3Com Corporation | System and method for efficiently handling multicast packets by aggregating VLAN context |
US6839348B2 (en) | 1999-04-30 | 2005-01-04 | Cisco Technology, Inc. | System and method for distributing multicasts in virtual local area networks |
US6208841B1 (en) | 1999-05-03 | 2001-03-27 | Qualcomm Incorporated | Environmental simulator for a wireless communication device |
US6285662B1 (en) | 1999-05-14 | 2001-09-04 | Nokia Mobile Phones Limited | Apparatus, and associated method for selecting a size of a contention window for a packet of data system |
US6493679B1 (en) | 1999-05-26 | 2002-12-10 | Wireless Valley Communications, Inc. | Method and system for managing a real time bill of materials |
US6317599B1 (en) | 1999-05-26 | 2001-11-13 | Wireless Valley Communications, Inc. | Method and system for automated optimization of antenna positioning in 3-D |
US6892230B1 (en) | 1999-06-11 | 2005-05-10 | Microsoft Corporation | Dynamic self-configuration for ad hoc peer networking using mark-up language formated description messages |
US6393290B1 (en) | 1999-06-30 | 2002-05-21 | Lucent Technologies Inc. | Cost based model for wireless architecture |
US6760324B1 (en) | 1999-09-10 | 2004-07-06 | Array Telecom Corporation | Method, system, and computer program product for providing voice over the internet communication |
US6631267B1 (en) | 1999-11-04 | 2003-10-07 | Lucent Technologies Inc. | Road-based evaluation and interpolation of wireless network parameters |
US6587680B1 (en) | 1999-11-23 | 2003-07-01 | Nokia Corporation | Transfer of security association during a mobile terminal handover |
AU2001231175A1 (en) | 2000-01-26 | 2001-08-07 | Vyyo, Ltd. | Quality of service scheduling scheme for a broadband wireless access system |
US6512916B1 (en) | 2000-02-23 | 2003-01-28 | America Connect, Inc. | Method for selecting markets in which to deploy fixed wireless communication systems |
FI109163B (en) | 2000-02-24 | 2002-05-31 | Nokia Corp | Method and apparatus for supporting mobility in a telecommunication system |
US6985465B2 (en) | 2000-07-07 | 2006-01-10 | Koninklijke Philips Electronics N.V. | Dynamic channel selection scheme for IEEE 802.11 WLANs |
US7024394B1 (en) | 2000-07-07 | 2006-04-04 | International Business Machines Corporation | System and method for protecting user logoff from web business transactions |
US6659947B1 (en) | 2000-07-13 | 2003-12-09 | Ge Medical Systems Information Technologies, Inc. | Wireless LAN architecture for integrated time-critical and non-time-critical services within medical facilities |
US7020773B1 (en) | 2000-07-17 | 2006-03-28 | Citrix Systems, Inc. | Strong mutual authentication of devices |
US6404772B1 (en) | 2000-07-27 | 2002-06-11 | Symbol Technologies, Inc. | Voice and data wireless communications network and method |
US6625454B1 (en) | 2000-08-04 | 2003-09-23 | Wireless Valley Communications, Inc. | Method and system for designing or deploying a communications network which considers frequency dependent effects |
US6687498B2 (en) | 2000-08-14 | 2004-02-03 | Vesuvius Inc. | Communique system with noncontiguous communique coverage areas in cellular communication networks |
US7280495B1 (en) | 2000-08-18 | 2007-10-09 | Nortel Networks Limited | Reliable broadcast protocol in a wireless local area network |
US7373425B2 (en) | 2000-08-22 | 2008-05-13 | Conexant Systems, Inc. | High-speed MAC address search engine |
US6973622B1 (en) | 2000-09-25 | 2005-12-06 | Wireless Valley Communications, Inc. | System and method for design, tracking, measurement, prediction and optimization of data communication networks |
US6937576B1 (en) | 2000-10-17 | 2005-08-30 | Cisco Technology, Inc. | Multiple instance spanning tree protocol |
US6954790B2 (en) | 2000-12-05 | 2005-10-11 | Interactive People Unplugged Ab | Network-based mobile workgroup system |
US6978301B2 (en) | 2000-12-06 | 2005-12-20 | Intelliden | System and method for configuring a network device |
US7155518B2 (en) | 2001-01-08 | 2006-12-26 | Interactive People Unplugged Ab | Extranet workgroup formation across multiple mobile virtual private networks |
US7133909B2 (en) | 2001-01-12 | 2006-11-07 | Microsoft Corporation | Systems and methods for locating mobile computer users in a wireless network |
US20020101868A1 (en) | 2001-01-30 | 2002-08-01 | David Clear | Vlan tunneling protocol |
DE60108225T2 (en) | 2001-05-08 | 2005-12-08 | Agere Systems Guardian Corp., Orlando | Dynamic frequency selection in a wireless local area network with channel exchange between access points |
US7483411B2 (en) | 2001-06-04 | 2009-01-27 | Nec Corporation | Apparatus for public access mobility LAN and method of operation thereof |
US7231521B2 (en) | 2001-07-05 | 2007-06-12 | Lucent Technologies Inc. | Scheme for authentication and dynamic key exchange |
US7313819B2 (en) | 2001-07-20 | 2007-12-25 | Intel Corporation | Automated establishment of addressability of a network device for a target network environment |
JP2003069570A (en) | 2001-08-27 | 2003-03-07 | Allied Tereshisu Kk | Management system |
US20030107590A1 (en) | 2001-11-07 | 2003-06-12 | Phillippe Levillain | Policy rule management for QoS provisioning |
US7406319B2 (en) | 2001-11-19 | 2008-07-29 | At&T Corp. | WLAN having load balancing by access point admission/termination |
CA2414789A1 (en) | 2002-01-09 | 2003-07-09 | Peel Wireless Inc. | Wireless networks security system |
US7076760B2 (en) | 2002-01-31 | 2006-07-11 | Cadence Design Systems, Inc. | Method and apparatus for specifying encoded sub-networks |
US6879812B2 (en) | 2002-02-08 | 2005-04-12 | Networks Associates Technology Inc. | Portable computing device and associated method for analyzing a wireless local area network |
JP3904462B2 (en) | 2002-02-12 | 2007-04-11 | 株式会社日立製作所 | Wireless communication method and wireless communication system |
US7535913B2 (en) | 2002-03-06 | 2009-05-19 | Nvidia Corporation | Gigabit ethernet adapter supporting the iSCSI and IPSEC protocols |
US20030174706A1 (en) | 2002-03-15 | 2003-09-18 | Broadcom Corporation | Fastpath implementation for transparent local area network (LAN) services over multiprotocol label switching (MPLS) |
US6839338B1 (en) | 2002-03-20 | 2005-01-04 | Utstarcom Incorporated | Method to provide dynamic internet protocol security policy service |
US7711809B2 (en) | 2002-04-04 | 2010-05-04 | Airmagnet, Inc. | Detecting an unauthorized station in a wireless local area network |
US6624762B1 (en) | 2002-04-11 | 2003-09-23 | Unisys Corporation | Hardware-based, LZW data compression co-processor |
WO2003098880A1 (en) | 2002-05-20 | 2003-11-27 | Fujitsu Limited | Network relaying device, network relaying method, and network relaying program |
US20030227934A1 (en) | 2002-06-11 | 2003-12-11 | White Eric D. | System and method for multicast media access using broadcast transmissions with multiple acknowledgements in an Ad-Hoc communications network |
US20050193103A1 (en) | 2002-06-18 | 2005-09-01 | John Drabik | Method and apparatus for automatic configuration and management of a virtual private network |
US7764660B2 (en) | 2002-06-21 | 2010-07-27 | Thomson Licensing | Registration of a WLAN as a UMTS routing area for WLAN-UMTS interworking |
US7965842B2 (en) | 2002-06-28 | 2011-06-21 | Wavelink Corporation | System and method for detecting unauthorized wireless access points |
DE60203708T2 (en) | 2002-07-05 | 2006-03-02 | Alcatel | Resources access control in an access network |
US7509096B2 (en) | 2002-07-26 | 2009-03-24 | Broadcom Corporation | Wireless access point setup and management within wireless local area network |
US7017186B2 (en) | 2002-07-30 | 2006-03-21 | Steelcloud, Inc. | Intrusion detection system using self-organizing clusters |
US7068999B2 (en) | 2002-08-02 | 2006-06-27 | Symbol Technologies, Inc. | System and method for detection of a rogue wireless access point in a wireless communication network |
EP1389812A1 (en) | 2002-08-13 | 2004-02-18 | Agilent Technologies Inc | A mounting arrangement for high frequency electro-optical components |
CN100389400C (en) | 2002-09-06 | 2008-05-21 | 美国凹凸微系有限公司 | VPN and firewall integrated system |
US7680086B2 (en) | 2002-09-09 | 2010-03-16 | Siemens Canada Limited | Wireless local area network with clients having extended freedom of movement |
US7245918B2 (en) | 2002-09-18 | 2007-07-17 | Telefonaktiebolaget Lm Ericsson (Publ) | Distributing shared network access information in a shared network mobile communications system |
US6957067B1 (en) | 2002-09-24 | 2005-10-18 | Aruba Networks | System and method for monitoring and enforcing policy within a wireless network |
US7130917B2 (en) | 2002-09-26 | 2006-10-31 | Cisco Technology, Inc. | Quality of service in a gateway |
US7440573B2 (en) | 2002-10-08 | 2008-10-21 | Broadcom Corporation | Enterprise wireless local area network switching system |
US7369859B2 (en) | 2003-10-17 | 2008-05-06 | Kineto Wireless, Inc. | Method and system for determining the location of an unlicensed mobile access subscriber |
US7062566B2 (en) | 2002-10-24 | 2006-06-13 | 3Com Corporation | System and method for using virtual local area network tags with a virtual private network |
US7421248B1 (en) | 2002-11-12 | 2008-09-02 | Cisco Technology, Inc. | Method and apparatus for adjusting operational parameter of a wireless device bases upon a monitored characteristic |
US20040203752A1 (en) | 2002-11-18 | 2004-10-14 | Toshiba America Information Systems, Inc. | Mobility communications system |
US8139551B2 (en) | 2002-11-19 | 2012-03-20 | Toshiba America Research, Inc. | Quality of service (QoS) assurance system using data transmission control |
AU2004231612C1 (en) | 2002-11-26 | 2010-05-20 | Cisco Technology, Inc. | 802.11 using a compressed reassociation exchange to facilitate fast handoff |
US7020438B2 (en) | 2003-01-09 | 2006-03-28 | Nokia Corporation | Selection of access point in a wireless communication system |
US7295960B2 (en) | 2003-01-22 | 2007-11-13 | Wireless Valley Communications, Inc. | System and method for automated placement or configuration of equipment for obtaining desired network performance objectives |
US7266089B2 (en) | 2003-02-21 | 2007-09-04 | Qwest Communications International Inc. | Systems and methods for creating a wireless network |
US20040202122A1 (en) | 2003-02-24 | 2004-10-14 | Floyd Backes | Wireless access point protocol program |
US20040208570A1 (en) | 2003-04-18 | 2004-10-21 | Reader Scot A. | Wavelength-oriented virtual networks |
US7359676B2 (en) | 2003-04-21 | 2008-04-15 | Airdefense, Inc. | Systems and methods for adaptively scanning for wireless communications |
WO2004095192A2 (en) | 2003-04-21 | 2004-11-04 | Airdefense, Inc. | Systems and methods for securing wireless computer networks |
US20040259555A1 (en) | 2003-04-23 | 2004-12-23 | Rappaport Theodore S. | System and method for predicting network performance and position location using multiple table lookups |
US20040255167A1 (en) | 2003-04-28 | 2004-12-16 | Knight James Michael | Method and system for remote network security management |
US7849217B2 (en) | 2003-04-30 | 2010-12-07 | Cisco Technology, Inc. | Mobile ethernet |
US6925378B2 (en) | 2003-05-12 | 2005-08-02 | Circumnav Networks, Inc. | Enhanced mobile communication device with extended radio, and applications |
US8108916B2 (en) | 2003-05-21 | 2012-01-31 | Wayport, Inc. | User fraud detection and prevention of access to a distributed network communication system |
EP1482686A3 (en) | 2003-05-28 | 2005-01-26 | Broadcom Corporation | Extending the mobility of a wireless headset by using access points of a wireless local area network (WLAN) |
US7257107B2 (en) | 2003-07-15 | 2007-08-14 | Highwall Technologies, Llc | Device and method for detecting unauthorized, “rogue” wireless LAN access points |
JP4211529B2 (en) | 2003-08-06 | 2009-01-21 | 日本電気株式会社 | Channel selection method and radio station and program used therefor |
US20050054326A1 (en) | 2003-09-09 | 2005-03-10 | Todd Rogers | Method and system for securing and monitoring a wireless network |
US7324468B2 (en) | 2003-09-10 | 2008-01-29 | Broadcom Corporation | System and method for medium access control in a power-save network |
US20050059405A1 (en) | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Simulation driven wireless LAN planning |
US20050073980A1 (en) | 2003-09-17 | 2005-04-07 | Trapeze Networks, Inc. | Wireless LAN management |
US20050059406A1 (en) | 2003-09-17 | 2005-03-17 | Trapeze Networks, Inc. | Wireless LAN measurement feedback |
US7221946B2 (en) | 2003-09-22 | 2007-05-22 | Broadcom Corporation | Automatic quality of service based resource allocation |
US7110756B2 (en) | 2003-10-03 | 2006-09-19 | Cognio, Inc. | Automated real-time site survey in a shared frequency band environment |
US20050157730A1 (en) | 2003-10-31 | 2005-07-21 | Grant Robert H. | Configuration management for transparent gateways in heterogeneous storage networks |
US20050223111A1 (en) | 2003-11-04 | 2005-10-06 | Nehru Bhandaru | Secure, standards-based communications across a wide-area network |
US9131272B2 (en) | 2003-11-04 | 2015-09-08 | Universal Electronics Inc. | System and method for saving and recalling state data for media and home appliances |
US20050122977A1 (en) | 2003-12-05 | 2005-06-09 | Microsoft Corporation | Efficient download mechanism for devices with limited local storage |
US7002943B2 (en) | 2003-12-08 | 2006-02-21 | Airtight Networks, Inc. | Method and system for monitoring a selected region of an airspace associated with local area networks of computing devices |
US7466678B2 (en) | 2003-12-29 | 2008-12-16 | Lenovo (Singapore) Pte. Ltd. | System and method for passive scanning of authorized wireless channels |
US7221927B2 (en) | 2004-02-13 | 2007-05-22 | Trapeze Networks, Inc. | Station mobility between access points |
US7489648B2 (en) | 2004-03-11 | 2009-02-10 | Cisco Technology, Inc. | Optimizing 802.11 power-save for VLAN |
US20050245269A1 (en) | 2004-04-30 | 2005-11-03 | Intel Corporation | Channel scanning in wireless networks |
US7376080B1 (en) | 2004-05-11 | 2008-05-20 | Packeteer, Inc. | Packet load shedding |
DE102004028555A1 (en) * | 2004-06-15 | 2006-02-16 | Zf Friedrichshafen Ag | Pedal arrangement for a motor vehicle |
GR1005055B (en) | 2004-08-27 | 2005-12-06 | Atmel Corporation | Method and system for aquality of service mechanism for a wireless network |
US7317914B2 (en) | 2004-09-24 | 2008-01-08 | Microsoft Corporation | Collaboratively locating disconnected clients and rogue access points in a wireless network |
US20060104224A1 (en) | 2004-10-13 | 2006-05-18 | Gurminder Singh | Wireless access point with fingerprint authentication |
US7224970B2 (en) | 2004-10-26 | 2007-05-29 | Motorola, Inc. | Method of scanning for beacon transmissions in a WLAN |
JP4433400B2 (en) | 2004-12-09 | 2010-03-17 | レノボ シンガポール プライヴェート リミテッド | Wireless network communication card, device incorporating the card, device supporting wireless network communication, and method of detecting a wireless access point for wireless network communication |
US7725938B2 (en) | 2005-01-20 | 2010-05-25 | Cisco Technology, Inc. | Inline intrusion detection |
US7630713B2 (en) | 2005-02-18 | 2009-12-08 | Lenovo (Singapore) Pte Ltd. | Apparatus, system, and method for rapid wireless network association |
EP1867094A2 (en) | 2005-03-15 | 2007-12-19 | Trapeze Networks, Inc. | System and method for distributing keys in a wireless network |
US20060245393A1 (en) | 2005-04-27 | 2006-11-02 | Symbol Technologies, Inc. | Method, system and apparatus for layer 3 roaming in wireless local area networks (WLANs) |
CA2608721C (en) | 2005-05-18 | 2011-10-18 | Telcordia Technologies, Inc. | Seamless handoff across heterogeneous access networks using a handoff controller |
US8775571B2 (en) * | 2005-06-07 | 2014-07-08 | Extreme Networks, Inc. | Methods, systems, and computer program products for dynamic network access device port and user device configuration for implementing device-based and user-based policies |
US7724717B2 (en) | 2005-07-22 | 2010-05-25 | Sri International | Method and apparatus for wireless network security |
TW200708125A (en) * | 2005-08-08 | 2007-02-16 | Giga Byte Tech Co Ltd | Communication apparatus |
US7561599B2 (en) | 2005-09-19 | 2009-07-14 | Motorola, Inc. | Method of reliable multicasting |
US20070070937A1 (en) | 2005-09-28 | 2007-03-29 | Mustafa Demirhan | Multi-radio mesh network channel selection and load balancing |
US20070083924A1 (en) | 2005-10-08 | 2007-04-12 | Lu Hongqian K | System and method for multi-stage packet filtering on a networked-enabled device |
US7551619B2 (en) | 2005-10-13 | 2009-06-23 | Trapeze Networks, Inc. | Identity-based networking |
US7724703B2 (en) | 2005-10-13 | 2010-05-25 | Belden, Inc. | System and method for wireless network monitoring |
US7573859B2 (en) | 2005-10-13 | 2009-08-11 | Trapeze Networks, Inc. | System and method for remote monitoring in a wireless network |
US7688755B2 (en) | 2005-10-25 | 2010-03-30 | Motorola, Inc. | Method and apparatus for group leader selection in wireless multicast service |
US20070260720A1 (en) | 2006-05-03 | 2007-11-08 | Morain Gary E | Mobility domain |
US7577453B2 (en) | 2006-06-01 | 2009-08-18 | Trapeze Networks, Inc. | Wireless load balancing across bands |
US7912982B2 (en) | 2006-06-09 | 2011-03-22 | Trapeze Networks, Inc. | Wireless routing selection system and method |
US9191799B2 (en) | 2006-06-09 | 2015-11-17 | Juniper Networks, Inc. | Sharing data between wireless switches system and method |
US8144673B2 (en) | 2006-07-07 | 2012-03-27 | Skyhook Wireless, Inc. | Method and system for employing a dedicated device for position estimation by a WLAN positioning system |
TW200805994A (en) * | 2006-07-11 | 2008-01-16 | Wistron Neweb Corp | A method of establishing wireless network connection for a mobile phone and a mobile phone using the same |
US7724704B2 (en) | 2006-07-17 | 2010-05-25 | Beiden Inc. | Wireless VLAN system and method |
US7813744B2 (en) | 2006-08-31 | 2010-10-12 | Polycom, Inc. | Method for determining DFS channel availability in a wireless LAN |
KR100758354B1 (en) | 2006-09-01 | 2007-09-14 | 삼성전자주식회사 | Method for scanning access points during station's handoff procedure in wireless communication system and station of performing the method, and network interface of supporting the method and wireless communication system of enabling the method |
US8072952B2 (en) | 2006-10-16 | 2011-12-06 | Juniper Networks, Inc. | Load balancing |
US20080107077A1 (en) | 2006-11-03 | 2008-05-08 | James Murphy | Subnet mobility supporting wireless handoff |
US20080151844A1 (en) | 2006-12-20 | 2008-06-26 | Manish Tiwari | Wireless access point authentication system and method |
US7788475B2 (en) * | 2006-12-28 | 2010-08-31 | Intel Corporation | Booting utilizing electronic mail |
-
2007
- 2007-12-28 WO PCT/US2007/089134 patent/WO2008083339A2/en active Application Filing
- 2007-12-28 US US11/966,912 patent/US7865713B2/en active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5872968A (en) * | 1996-10-16 | 1999-02-16 | International Business Machines Corporation | Data processing network with boot process using multiple servers |
US20050273442A1 (en) * | 2004-05-21 | 2005-12-08 | Naftali Bennett | System and method of fraud reduction |
US20060200862A1 (en) * | 2005-03-03 | 2006-09-07 | Cisco Technology, Inc. | Method and apparatus for locating rogue access point switch ports in a wireless network related patent applications |
Also Published As
Publication number | Publication date |
---|---|
US20080162921A1 (en) | 2008-07-03 |
WO2008083339A3 (en) | 2008-10-09 |
US7865713B2 (en) | 2011-01-04 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7865713B2 (en) | Application-aware wireless network system and method | |
US20170250870A1 (en) | Virtual network policy configuration method and system, and virtual network element and network administration system thereof | |
EP2769571B1 (en) | Mobile risk assessment | |
US10826939B2 (en) | Blended honeypot | |
US8024450B1 (en) | System and method for remote administration of computer network | |
EP3249871A1 (en) | Method and device for updating network service descriptor | |
US20110283138A1 (en) | Change Tracking and Management in Distributed Applications | |
US10785234B2 (en) | Dynamic packet inspection plan system utilizing rule probability based selection | |
CN108605264B (en) | Method and apparatus for network management | |
US20230209347A1 (en) | Secure attestation packages for devices on a wireless network | |
CN106162817A (en) | The method for building up of wireless backhaul links, device and communication system | |
US20220121471A1 (en) | Device virtualization security layer | |
US20130083689A1 (en) | Ownership requests for access points | |
US11937091B2 (en) | Providing service using network slicing | |
US20080172742A1 (en) | Information processing system | |
US20120226787A1 (en) | Optimizing use of internet protocol addresses | |
Alsumayt et al. | Detect DoS attack using MrDR method in merging two MANETs | |
US20220191716A1 (en) | Updating Record of Border Cells | |
Talpur et al. | Adversarial attacks against deep reinforcement learning framework in internet of vehicles | |
US11016852B1 (en) | Guarded mode boot up and/or recovery of a network device | |
CN107948002B (en) | AP access control method and device | |
CN111478787B (en) | AP restarting method and management equipment | |
CN107949009B (en) | Method and device for detecting LTE network access result and computer storage medium | |
CN114158097A (en) | Terminal continuous communication method, system and medium based on 5G base station switching | |
CN106709344B (en) | Virus checking and killing notification method and server |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 07866104 Country of ref document: EP Kind code of ref document: A2 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 07866104 Country of ref document: EP Kind code of ref document: A2 |