WO2008083339A2 - Application-aware wireless network system and method - Google Patents

Application-aware wireless network system and method Download PDF

Info

Publication number
WO2008083339A2
WO2008083339A2 PCT/US2007/089134 US2007089134W WO2008083339A2 WO 2008083339 A2 WO2008083339 A2 WO 2008083339A2 US 2007089134 W US2007089134 W US 2007089134W WO 2008083339 A2 WO2008083339 A2 WO 2008083339A2
Authority
WO
WIPO (PCT)
Prior art keywords
software
boot
boot image
software sets
aps
Prior art date
Application number
PCT/US2007/089134
Other languages
French (fr)
Other versions
WO2008083339A3 (en
Inventor
Stan Chesnutt
Jamsheed Bugwadia
Yun Freund
Roy Gignac
Matthew Stuart Gast
Dan Simone
Gary Morain
Original Assignee
Trapeze Networks, Inc.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Trapeze Networks, Inc. filed Critical Trapeze Networks, Inc.
Publication of WO2008083339A2 publication Critical patent/WO2008083339A2/en
Publication of WO2008083339A3 publication Critical patent/WO2008083339A3/en

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12Detection or prevention of fraud
    • H04W12/121Wireless intrusion detection systems [WIDS]; Wireless intrusion prevention systems [WIPS]
    • H04W12/122Counter-measures against attacks; Protection against rogue devices
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W88/00Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/08Access point devices

Definitions

  • An access point is a device used by wireless clients to connect to a network.
  • An AP functions as a standalone entity in some implementations and functions in cooperation with distribution hardware in other implementations.
  • Distribution hardware may include a wireless switch used to manage APs and provide network-connectivity to wireless clients.
  • a wireless domain may refer to a group of wireless switches that are configured to exchange relevant information, and using this information make informed decisions.
  • a known device is a station (e.g., a wireless AP or client device) that is part of a network wireless installation.
  • a rogue device is a station that is considered harmful for a network wireless installation because it is, for example, violating policies or hampering wireless access to the network.
  • a traditional approach to rogue detection has been to (1) use a second set of hardware in addition to APs, or (2) provide an integrated network that provides both data services and rogue detection services.
  • the advantage of the first approach is that a user can select the best devices for the job, though this often results in higher capital and operational expenditures.
  • the second approach saves money by using a single network and point of administration, but the user may have to compromise product feature sets because of the need to use a single vendor.
  • a technique for dynamically responding to threats in a wireless network involves deploying a single network including APs capable of booting from a plurality of software images. Individual APs can switch (or be switched) between multiple sets of software so that network managers can select the AP software most appropriate for a given instance. For example, if a threat is detected, multiple APs can be switched to sensor mode to deal with the threat. As another example, all of the APs can be switched to sensor mode after hours. Alternatively, a server can provide the software image(s) needed for an AP to operate in accordance with a desired functionality. [0007]
  • the proposed system can offer, among other advantages, improved wireless network functionality. This and other advantages of the techniques described herein will become apparent to those skilled in the art upon a reading of the following descriptions and a study of the several figures of the drawings.
  • FIGS. IA and IB depict an example of a system having a plurality of multi- boot access points (APs).
  • APs multi- boot access points
  • FIGS. 2A, 2B, and 1C depict a wireless domain that includes a plurality of multi-boot APs.
  • FIG. 3 depicts an example of a multi-boot AP device.
  • FIG. 4 depicts an example of a system for changing bootl statically at an AP.
  • FIG. 5 depicts an example of a system for changing bootl dynamically at an AP.
  • FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image.
  • FIGS. IA and IB depict an example of a system 100 having a plurality of multi-boot access points (APs).
  • the system 100 includes distribution system 102, and a plurality of multi-boot APs 104-1 to 104-N (referred to collectively as multi-boot APs 104).
  • the system 100 includes a station 110 that is associated, for illustrative purposes, with the multi- boot AP 104-2.
  • the station 106 has associated with the multi-boot AP 104-2, the multi-boot AP 104-2 has booted software that enables operation as a traditional AP.
  • any of the multi-boot APs 104 can be switched to a different mode by booting different software.
  • the multi-boot AP 104-2 becomes aware that the station 106 is a rogue 108.
  • the association ends.
  • the rogue 108 appears to be disassociated from the multi-boot AP 104-2, the rogue 108 could be detected before an actual association with the multi-boot AP 104-2.
  • the determination that the station 106 is the rogue 108 may be made at the distribution system 102, or by some other one or more of the multi-boot APs 104 that are configured in, for example, a sensor mode.
  • the multi-boot AP 104-2 can be
  • FIGS. 2A, 2B, and 2C depict a wireless domain 200 that includes a plurality of multi-boot APs.
  • the wireless domain 200 may include, by way of example but not limitation, a Trapeze Networks, Inc. MOBILITY DOMAINTM wireless domain.
  • a Trapeze Networks, Inc. MOBILITY DOMAINTM wireless domain.
  • the wireless domain 200 includes a plurality of multi-boot APs 202 configured in network connectivity mode (APs 202) and a plurality of multi-boot APs 204 configured in sensor mode (sensors 204).
  • the APs 202 and the sensors 204 are organized in an arbitrary or implementation-specific pattern in the mobility domain 200.
  • a rogue 206 is detected in the wireless domain 200.
  • an alarm may be generated.
  • the alarm can lead to a change in the functionality of the APs 202 and/or sensors 204.
  • One example of a change is illustrated in the example of FIG. 2C.
  • APs 202 in the vicinity of the rogue 206 are switched to sensors 204.
  • the changed sensors are shaded in the example of FIG. 2C.
  • the determination as to which APs to change to sensors may depend upon implementation-specific configurations or capabilities. For example, APs may be changed to sensors when a risk score exceeds a threshold value.
  • the threshold value may be set, and the risk score may increase based upon activities or events associated with a station, hi
  • the number of APs to convert is also either statically or dynamically configurable. For example, the number of APs converted may be based upon the severity of an event that triggers the conversion. In another illustrative embodiment, multiple APs may be converted for other reasons. For example, if at least three APs are in sensor mode, then triangulation may be facilitated. Additional APs may improve the accuracy of a triangulation technique.
  • the amount of investigation predicted to be required may have a bearing on the number of APs converted.
  • the system may convert APs depending upon the location of the event that triggers the conversion.
  • the location of the APs may have a bearing upon the choice of APs to convert.
  • the amount of load on an AP may have a bearing on whether the AP is converted. For example, if an AP that has a lot of stations associated with it is selected for conversion to a sensor, it may be decided that the conversion is not worth the disruption of service to the associated stations, if any.
  • FIG. 3 depicts an example of a multi-boot AP device 300.
  • the device 300 includes memory 302, a processor 304, one or more radios 306- 1, 306-2 (referred to collectively as radios 306), a primary boot 308, one or more supplemental boots 310-1, 310-2 (referred to collectively as supplemental boots 310), one or more network interfaces 312-1, 312-2 (referred to collectively as network interfaces 312), and a bus 314 to which each of the other components are coupled.
  • the memory 302 may be primary memory such as random access memory (RAM). Any applicable known or convenient memory may be used.
  • the processor 304 may be a central processing
  • the radios 306 may be set to work on the same technology/protocol.
  • the radios may have different configurations, such as different channel operations or modes.
  • the radios 306 may also be set to work on different technology/protocols, such as 802.1 Ia for one and 802.1 lb/g for another. Any known or convenient radio technology may be used.
  • the primary boot 308 is embodied in a computer-readable medium.
  • the computer-readable medium may include, by way of example but not limitation, flash memory.
  • the supplemental boots 310 are embodied in a computer-readable medium, as well.
  • the network interfaces 312 may include Ethernet interfaces. However, any applicable known or convenient network interfaces could be used.
  • the primary boot 308 is the first boot partition, bootO, and a supplemental boot 310-1 is the second boot partition, bootl.
  • the device 300 will first attempt to boot from the bootl. If that fails, or if the bootl partition is marked bad, it will fall back to bootO.
  • Trapeze Networks software may be loaded into bootO, and third-party software into bootl. That way, the device 300 will boot under control of third-party software. To switch back, the bootl partition is marked bad, which causes the device 300 to fall back to Trapeze Networks software.
  • the Trapeze Networks software is read-only so that the image is always available, but this is an implementation-specific decision. In this
  • FIG. 4 depicts an example of a system 400 for changing bootl statically at an AP.
  • changing bootl statically refers to making the change by an administrator.
  • Dynamically changing bootl on the other hand, which is discussed later with reference to FIG. 5, involves changing bootl in accordance with detected events, a schedule, or other environmental stimuli.
  • the system 400 includes a network administrator 402, a management system 404, a switch 406, and an AP 408.
  • the network administrator 402 may include a human and/or artificial entity.
  • the management system 404 may be embodied in a computer-readable medium and may include, by way of example but not limitation, a TRAPEZE NETWORKS RINGMASTERTM management system.
  • the switch 406 may include, by way of example but not limitation, a MOBILITY EXCHANGETM or MX® switch.
  • the AP may include a MOBILITY POINTTM or MP® AP.
  • the switch 406 includes a primary boot image 410, one or more supplemental boot images 412-1 to 412-N (referred to collectively as the supplemental boot images 412), and an AP configuration database 414.
  • the AP 408 includes the primary boot image 410 (bootO) and one of the supplemental boot images 412 (bootl).
  • the network administrator 402 may trigger changes to bootl at the AP 408 using the management system 404.
  • the control application 404 upon receiving an appropriate command from the network administrator 402 sends a command to the switch 406 to change bootl, as appropriate.
  • the network administrator 402 may also enter the appropriate command to the switch 406.
  • the network administrator 402 may or may not be able to also change bootO at the AP 408 using CLI or other commands. However, it may be desirable to provide the capability of allowing installation of the primary boot image at installation or re- installation.
  • the AP configuration database 414 on the switch 406 is updated to indicate that the AP 408 should use one of the supplemental boot images 412.
  • the switch 406 then provides the appropriate boot image of the supplemental boot images 412 to the AP 408, which the AP 408 stores as bootl.
  • FIG. 4 depicts components that may be used for static AP boot image installation, in some embodiments it may be desirable to add dynamic AP boot image installation (or switching between boot images at the AP).
  • Some examples of events leading to dynamic conversion may include by way of example but not limitation:
  • the management system can select an AP based on a policy that includes the strongest signal strength, to pick the "closest" AP, or the least loaded AP, so as to minimize user disruption.
  • the management system can manage AP conversions so as to ensure that a minimum set of APs are being used to provide service and prevent service from falling below a threshold. Likewise, the management system can manage the AP pool so that a minimum level of third-party functionality is maintained.
  • the management system can assess threat levels based on, for example, a risk- based score so that there is a minimum threshold score for conversion, and progressively higher scores result in conversion of larger numbers of APs to security services.
  • the management system can link conversion events to a rollback, so that an AP can be "leased” to a third-party application and reclaimed at the end of a given time duration. It would also be possible for that application to extend its lease.
  • FIG. 5 depicts an example of a system 500 for changing boot images dynamically at an AP.
  • the system 500 includes a management system 502, one or more third party applications 504-1 to 504-N (referred to collectively as third party applications 504), one or more wireless domains 506-1 to 506-N (referred to collectively as wireless domains 506), a server 508, a switch 510, and an AP 512.
  • the third party applications 504 include applications that provide functionality to the server 508 that may be of use in a wireless domain.
  • the third party applications 504 may include security applications.
  • the wireless domains 506 provide RF data to the server 508.
  • the switch 510 may be included in one of the wireless domains 506, and may provide RF data (not shown).
  • the server 508 may include an AP selector 514, a scheduler 516, AP images 518, and a command system 520.
  • the AP selector 514 can receive requests for conversion from multiple sources and unify them.
  • the AP selector 514 may receive input from the third party applications 504, the wireless domains 506 (e.g., in the form of RF data), or from other applicable sources that serve to improve the
  • the AP selector 514 may include an engine for making probabilistic assessments of risk prior to image selection.
  • the AP selector may initially convert a few APs on the first request from a third-party system, and progressively add more if the situation is not resolved.
  • the AP selector 514 after determining a course of action based upon the risk assessment, provides a command to the command system 520.
  • the scheduler 516 may include a timer that is set according to implementation-specific parameters.
  • the timer may be associated with a running time between conversion of APs, times when an enterprise is open (e.g., switching to network connectivity mode during work hours), or some other schedule.
  • the scheduler 516 provides a command to the command system 520 based upon the configured schedule(s).
  • the AP images 518 are available to the command system 520. It may be that the AP images 518 are not needed even when an AP image is to be changed.
  • the AP 512 may include multiple boot images, including the image to which the switch 510 (as instructed by the command system 520) attempts to switch the AP 512. It may be that the AP images 518 are needed because the AP 512 can only hold a single image (requiring a new image with each AP image change), or because the AP 512 does not include the image that is needed based upon the desired functionality.
  • multiple IDS partners may be used for statistical defense against attacks. APs could also be dedicated on-demand to location functions and "spotlighting" particular client devices.
  • FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image. This method and other methods are depicted as serially arranged
  • the flowchart 600 starts at module 602 where a plurality of software images are provided.
  • the software images may be provided at a server or at an AP.
  • the flowchart 600 continues to module 604 where a boot image is selected from the plurality of software images.
  • the boot image may be selected after a determination is made as to the desired functionality for an AP at a given time. The determination may be based upon, for example, risk assessment, according to a schedule, or to sign a spotlight on a particular station.
  • the flowchart 600 continues to module 606 where an AP is booted using the boot image. Then the flowchart 600 ends. Presumably, the AP then operates in accordance with the functionality of the boot image.
  • a wireless network refers to any type of wireless network, including but not limited to a structured network or an ad hoc network.
  • Data on a wireless network is often encrypted. However, data may also be sent in the clear, if desired. With encrypted data, a rogue device will have a difficult time learning any information (such as passwords, etc.) from clients before countermeasures are taken to deal with the rogue. The rogue may be able to confuse the client, and perhaps obtain some encrypted data, but the risk is minimal (even less than for some wired networks).
  • access point refers to receiving points for any known or convenient wireless access technology. Specifically, the term AP is not intended to be limited to 802.11 APs.
  • the algorithms and techniques described herein also relate to apparatus for performing the algorithms and techniques.
  • This apparatus may be specially constructed for the required purposes, or it may comprise a general purpose computer selectively activated or reconfigured by a computer program stored in the computer. Such a
  • DOC 13 computer program may be stored in a computer readable storage medium, such as, but is not limited to, read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic or optical cards, any type of disk including floppy disks, optical disks, CD-ROMs, and magnetic-optical disks, or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus.
  • ROMs read-only memories
  • RAMs random access memories
  • EPROMs EPROMs
  • EEPROMs electrically erasable programmable read-only memory
  • magnetic or optical cards any type of disk including floppy disks, optical disks, CD-ROMs, and magnetic-optical disks, or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus.
  • AP access point
  • all wireless access technologies require something comparable (i.e., a node at which wireless communications are received and/or transmitted).
  • an independent basic service set includes stations that access the service area by directly communicating with one another; thus, the access nodes are the stations themselves. Accordingly, AP is considered to be generally applicable to any technology, regardless of actual verbiage used to describe a BSS with equivalent functionality.

Abstract

A technique for dynamically responding to threats in a wireless network involves deploying a single network including APs capable of booting from a plurality of software images. Individual APs can switch (or be switched) between multiple sets of software so that network managers can select the AP software most appropriate for a given instance. For example, if a threat is detected, multiple APs can be switched to sensor mode to deal with the threat. As another example, all of the APs can be switched to sensor mode after hours. Alternatively, a server can provide the software image(s) needed for an AP to operate in accordance with a desired functionality.

Description

APPLICATION-AWARE WIRELESS NETWORK SYSTEM AND METHOD
CROSS-REFERENCE TO RELATED APPLICATIONS
[0001] This application claims priority to U.S. Provisional Patent Application No. 60/877,907, filed December 28, 2006, which is hereby incorporated by reference in its entirety.
BACKGROUND
[0002] An access point (AP) is a device used by wireless clients to connect to a network. An AP functions as a standalone entity in some implementations and functions in cooperation with distribution hardware in other implementations. Distribution hardware may include a wireless switch used to manage APs and provide network-connectivity to wireless clients. A wireless domain may refer to a group of wireless switches that are configured to exchange relevant information, and using this information make informed decisions. A known device is a station (e.g., a wireless AP or client device) that is part of a network wireless installation. A rogue device is a station that is considered harmful for a network wireless installation because it is, for example, violating policies or hampering wireless access to the network. [0003] A traditional approach to rogue detection has been to (1) use a second set of hardware in addition to APs, or (2) provide an integrated network that provides both data services and rogue detection services. The advantage of the first approach is that a user can select the best devices for the job, though this often results in higher capital and operational expenditures. The second approach saves money by using a single network and point of administration, but the user may have to compromise product feature sets because of the need to use a single vendor.
13837061 l.DOC 1 [0004] These are but a subset of the problems and issues associated with wireless access point authentication, and are intended to characterize weaknesses in the prior art by way of example. The foregoing examples of the related art and limitations related therewith are intended to be illustrative and not exclusive. Other limitations of the related art will become apparent to those of skill in the art upon a reading of the specification and a study of the drawings.
SUMMARY
[0005] The following embodiments and aspects thereof are described and illustrated in conjunction with systems, tools, and methods that are meant to be exemplary and illustrative, not limiting in scope. In various embodiments, one or more of the above- described problems have been reduced or eliminated, while other embodiments are directed to other improvements.
[0006] A technique for dynamically responding to threats in a wireless network involves deploying a single network including APs capable of booting from a plurality of software images. Individual APs can switch (or be switched) between multiple sets of software so that network managers can select the AP software most appropriate for a given instance. For example, if a threat is detected, multiple APs can be switched to sensor mode to deal with the threat. As another example, all of the APs can be switched to sensor mode after hours. Alternatively, a server can provide the software image(s) needed for an AP to operate in accordance with a desired functionality. [0007] The proposed system can offer, among other advantages, improved wireless network functionality. This and other advantages of the techniques described herein will become apparent to those skilled in the art upon a reading of the following descriptions and a study of the several figures of the drawings.
13837061 l.DOC 2 BRIEF DESCRIPTION OF THE DRAWINGS
[0008] Embodiments of the invention are illustrated in the figures. However, the embodiments and figures are illustrative rather than limiting; they provide examples of the invention.
[0009] FIGS. IA and IB depict an example of a system having a plurality of multi- boot access points (APs).
[0010] FIGS. 2A, 2B, and 1C depict a wireless domain that includes a plurality of multi-boot APs.
[0011] FIG. 3 depicts an example of a multi-boot AP device.
[0012] FIG. 4 depicts an example of a system for changing bootl statically at an AP. [0013] FIG. 5 depicts an example of a system for changing bootl dynamically at an AP.
[0014] FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image.
13S37061 l.DOC DETAILED DESCRIPTION
[0015] In the following description, several specific details are presented to provide a thorough understanding of embodiments of the invention. One skilled in the relevant art will recognize, however, that the invention can be practiced without one or more of the specific details, or in combination with other components, etc. In other instances, well-known implementations or operations are not shown or described in detail to avoid obscuring aspects of various embodiments, of the invention. [0016] FIGS. IA and IB depict an example of a system 100 having a plurality of multi-boot access points (APs). In the example of FIGS. IA and IB, the system 100 includes distribution system 102, and a plurality of multi-boot APs 104-1 to 104-N (referred to collectively as multi-boot APs 104). In the example of FIG. IA, the system 100 includes a station 110 that is associated, for illustrative purposes, with the multi- boot AP 104-2. Presumably, since the station 106 has associated with the multi-boot AP 104-2, the multi-boot AP 104-2 has booted software that enables operation as a traditional AP. However, any of the multi-boot APs 104 can be switched to a different mode by booting different software.
[0017] In the example of FIG. IB, the multi-boot AP 104-2 becomes aware that the station 106 is a rogue 108. When the multi-boot AP 104-2 becomes aware of the rogue 108, the association ends. Although in the example of FIG. IB the rogue 108 appears to be disassociated from the multi-boot AP 104-2, the rogue 108 could be detected before an actual association with the multi-boot AP 104-2.
[0018] The determination that the station 106 is the rogue 108 may be made at the distribution system 102, or by some other one or more of the multi-boot APs 104 that are configured in, for example, a sensor mode. The multi-boot AP 104-2 can be
13S37O61 l.DOC 4 rebooted with different software that gives the multi-boot 104-2, e.g., sensor functionality to help deal with the rogue 108 with, e.g., countermeasures. In an illustrative embodiment, when the multi-boot AP 104-2 is in sensor mode, no association is possible. Some of the advantages of the system 100 are explored later. [0019] FIGS. 2A, 2B, and 2C depict a wireless domain 200 that includes a plurality of multi-boot APs. The wireless domain 200 may include, by way of example but not limitation, a Trapeze Networks, Inc. MOBILITY DOMAIN™ wireless domain. In the example of FIG. 2A, the wireless domain 200 includes a plurality of multi-boot APs 202 configured in network connectivity mode (APs 202) and a plurality of multi-boot APs 204 configured in sensor mode (sensors 204). The APs 202 and the sensors 204 are organized in an arbitrary or implementation-specific pattern in the mobility domain 200.
[0020] In the example of FIG. 2B, a rogue 206 is detected in the wireless domain 200. When the rogue 206 is detected, an alarm may be generated. The alarm can lead to a change in the functionality of the APs 202 and/or sensors 204. One example of a change is illustrated in the example of FIG. 2C.
[0021] In the example of FIG. 2C, APs 202 in the vicinity of the rogue 206 are switched to sensors 204. For illustrative purposes, the changed sensors are shaded in the example of FIG. 2C. In an illustrative embodiment, the determination as to which APs to change to sensors may depend upon implementation-specific configurations or capabilities. For example, APs may be changed to sensors when a risk score exceeds a threshold value.
[0022] In another illustrative embodiment, the threshold value may be set, and the risk score may increase based upon activities or events associated with a station, hi
13837061 1 DOC another illustrative embodiment, the number of APs to convert is also either statically or dynamically configurable. For example, the number of APs converted may be based upon the severity of an event that triggers the conversion. In another illustrative embodiment, multiple APs may be converted for other reasons. For example, if at least three APs are in sensor mode, then triangulation may be facilitated. Additional APs may improve the accuracy of a triangulation technique.
[0023] In another illustrative embodiment, the amount of investigation predicted to be required may have a bearing on the number of APs converted. In another illustrative embodiment, the system may convert APs depending upon the location of the event that triggers the conversion. In another illustrative embodiment, the location of the APs may have a bearing upon the choice of APs to convert. In another illustrative embodiment, the amount of load on an AP may have a bearing on whether the AP is converted. For example, if an AP that has a lot of stations associated with it is selected for conversion to a sensor, it may be decided that the conversion is not worth the disruption of service to the associated stations, if any.
[0024] FIG. 3 depicts an example of a multi-boot AP device 300. In the example of FIG. 3, the device 300 includes memory 302, a processor 304, one or more radios 306- 1, 306-2 (referred to collectively as radios 306), a primary boot 308, one or more supplemental boots 310-1, 310-2 (referred to collectively as supplemental boots 310), one or more network interfaces 312-1, 312-2 (referred to collectively as network interfaces 312), and a bus 314 to which each of the other components are coupled. [0025] In an illustrative embodiment, the memory 302 may be primary memory such as random access memory (RAM). Any applicable known or convenient memory may be used. In an illustrative embodiment, the processor 304 may be a central processing
13837061 1 DOC unit (CPU), a microprocessor, or some other processor capable of executing code stored in the memory 302. Any applicable known or convenient processor may be used. In an illustrative embodiment, the radios 306 may be set to work on the same technology/protocol. The radios may have different configurations, such as different channel operations or modes. The radios 306 may also be set to work on different technology/protocols, such as 802.1 Ia for one and 802.1 lb/g for another. Any known or convenient radio technology may be used.
[0026] hi an illustrative embodiment, the primary boot 308 is embodied in a computer-readable medium. The computer-readable medium may include, by way of example but not limitation, flash memory. In an illustrative embodiment, the supplemental boots 310 are embodied in a computer-readable medium, as well. In an illustrative embodiment, the network interfaces 312 may include Ethernet interfaces. However, any applicable known or convenient network interfaces could be used. [0027] In an illustrative embodiment that has two boot partitions, bootO and bootl, the primary boot 308 is the first boot partition, bootO, and a supplemental boot 310-1 is the second boot partition, bootl. (In this illustrative embodiment, there is only one supplemental boot.) The device 300 will first attempt to boot from the bootl. If that fails, or if the bootl partition is marked bad, it will fall back to bootO. [0028] In a specific implementation, Trapeze Networks software may be loaded into bootO, and third-party software into bootl. That way, the device 300 will boot under control of third-party software. To switch back, the bootl partition is marked bad, which causes the device 300 to fall back to Trapeze Networks software. In at least one implementation, the Trapeze Networks software is read-only so that the image is always available, but this is an implementation-specific decision. In this
13837061 l.DOC implementation, only one third-party software image is provided in bootl, but it can be swapped out for another image.
[0029] FIG. 4 depicts an example of a system 400 for changing bootl statically at an AP. As used herein, changing bootl statically refers to making the change by an administrator. Dynamically changing bootl on the other hand, which is discussed later with reference to FIG. 5, involves changing bootl in accordance with detected events, a schedule, or other environmental stimuli.
[0030] In the example of FIG. 4, the system 400 includes a network administrator 402, a management system 404, a switch 406, and an AP 408. The network administrator 402 may include a human and/or artificial entity. The management system 404 may be embodied in a computer-readable medium and may include, by way of example but not limitation, a TRAPEZE NETWORKS RINGMASTER™ management system. The switch 406 may include, by way of example but not limitation, a MOBILITY EXCHANGE™ or MX® switch. The AP may include a MOBILITY POINT™ or MP® AP.
[0031] In the example of FIG. 4, the switch 406 includes a primary boot image 410, one or more supplemental boot images 412-1 to 412-N (referred to collectively as the supplemental boot images 412), and an AP configuration database 414. The AP 408 includes the primary boot image 410 (bootO) and one of the supplemental boot images 412 (bootl).
[0032] In the example of FIG. 4, in operation, the network administrator 402 may trigger changes to bootl at the AP 408 using the management system 404. The control application 404, upon receiving an appropriate command from the network administrator 402 sends a command to the switch 406 to change bootl, as appropriate.
13837061 l.DOC The network administrator 402 may also enter the appropriate command to the switch 406. The network administrator 402 may or may not be able to also change bootO at the AP 408 using CLI or other commands. However, it may be desirable to provide the capability of allowing installation of the primary boot image at installation or re- installation.
[0033] When the command is received at the switch 406, the AP configuration database 414 on the switch 406 is updated to indicate that the AP 408 should use one of the supplemental boot images 412. The switch 406 then provides the appropriate boot image of the supplemental boot images 412 to the AP 408, which the AP 408 stores as bootl.
[0034] While the example of FIG. 4 depicts components that may be used for static AP boot image installation, in some embodiments it may be desirable to add dynamic AP boot image installation (or switching between boot images at the AP). Some examples of events leading to dynamic conversion may include by way of example but not limitation:
• Automatic conversion of an AP to an IDS sensor based on an alarm.
• Automatic conversion of all APs to IDS sensors based on time, so that the entire wireless network stops offering service when the facility closes and instead runs an intrusion detection application. The conversion would be reversed when the facility reopens so that service is again provided to users.
• By automating the conversion in a management system, it may be possible to select the "best" AP for conversion. In the case of a rogue, it will likely be detected by several APs. In an illustrative embodiment, the management system can select an AP based on a policy that includes the strongest signal strength, to pick the "closest" AP, or the least loaded AP, so as to minimize user disruption.
13837061 l.DOC 9 • The management system can manage AP conversions so as to ensure that a minimum set of APs are being used to provide service and prevent service from falling below a threshold. Likewise, the management system can manage the AP pool so that a minimum level of third-party functionality is maintained.
• The management system can assess threat levels based on, for example, a risk- based score so that there is a minimum threshold score for conversion, and progressively higher scores result in conversion of larger numbers of APs to security services.
• The management system can link conversion events to a rollback, so that an AP can be "leased" to a third-party application and reclaimed at the end of a given time duration. It would also be possible for that application to extend its lease.
[0035] FIG. 5 depicts an example of a system 500 for changing boot images dynamically at an AP. The system 500 includes a management system 502, one or more third party applications 504-1 to 504-N (referred to collectively as third party applications 504), one or more wireless domains 506-1 to 506-N (referred to collectively as wireless domains 506), a server 508, a switch 510, and an AP 512. [0036] The third party applications 504 include applications that provide functionality to the server 508 that may be of use in a wireless domain. For example, the third party applications 504 may include security applications. The wireless domains 506 provide RF data to the server 508. It should be noted that the switch 510 may be included in one of the wireless domains 506, and may provide RF data (not shown). [0037] The server 508 may include an AP selector 514, a scheduler 516, AP images 518, and a command system 520. The AP selector 514 can receive requests for conversion from multiple sources and unify them. For example, the AP selector 514 may receive input from the third party applications 504, the wireless domains 506 (e.g., in the form of RF data), or from other applicable sources that serve to improve the
13837061 I DOC 10 accuracy of the AP selector 514 (not shown). The AP selector 514 may include an engine for making probabilistic assessments of risk prior to image selection. The AP selector may initially convert a few APs on the first request from a third-party system, and progressively add more if the situation is not resolved. The AP selector 514, after determining a course of action based upon the risk assessment, provides a command to the command system 520.
[0038] The scheduler 516 may include a timer that is set according to implementation-specific parameters. For example, the timer may be associated with a running time between conversion of APs, times when an enterprise is open (e.g., switching to network connectivity mode during work hours), or some other schedule. The scheduler 516 provides a command to the command system 520 based upon the configured schedule(s).
[0039] The AP images 518 are available to the command system 520. It may be that the AP images 518 are not needed even when an AP image is to be changed. For example, the AP 512 may include multiple boot images, including the image to which the switch 510 (as instructed by the command system 520) attempts to switch the AP 512. It may be that the AP images 518 are needed because the AP 512 can only hold a single image (requiring a new image with each AP image change), or because the AP 512 does not include the image that is needed based upon the desired functionality. [0040] Using techniques described herein, multiple IDS partners may be used for statistical defense against attacks. APs could also be dedicated on-demand to location functions and "spotlighting" particular client devices.
[0041] FIG. 6 depicts a flowchart 600 of an example of a method for booting an AP using a boot image. This method and other methods are depicted as serially arranged
13837061 1 DOC 1 1 modules. However, modules of the methods may be reordered, or arranged for parallel execution as appropriate. In the example of FIG. 6, the flowchart 600 starts at module 602 where a plurality of software images are provided. The software images may be provided at a server or at an AP.
[0042] In the example of FIG. 6, the flowchart 600 continues to module 604 where a boot image is selected from the plurality of software images. The boot image may be selected after a determination is made as to the desired functionality for an AP at a given time. The determination may be based upon, for example, risk assessment, according to a schedule, or to sign a spotlight on a particular station. [0043] In the example of FIG. 6, the flowchart 600 continues to module 606 where an AP is booted using the boot image. Then the flowchart 600 ends. Presumably, the AP then operates in accordance with the functionality of the boot image. [0044] As used herein, a wireless network refers to any type of wireless network, including but not limited to a structured network or an ad hoc network. Data on a wireless network is often encrypted. However, data may also be sent in the clear, if desired. With encrypted data, a rogue device will have a difficult time learning any information (such as passwords, etc.) from clients before countermeasures are taken to deal with the rogue. The rogue may be able to confuse the client, and perhaps obtain some encrypted data, but the risk is minimal (even less than for some wired networks). [0045] As used herein, access point (AP) refers to receiving points for any known or convenient wireless access technology. Specifically, the term AP is not intended to be limited to 802.11 APs.
[0046] Some portions of the detailed description are presented in terms of algorithms and symbolic representations of operations on data bits within a computer memory.
13837061 I DOC 12 These algorithmic descriptions and representations are the means used by those skilled in the data processing arts to most effectively convey the substance of their work to others skilled in the art. An algorithm is here, and generally, conceived to be a self- consistent sequence of operations leading to a desired result. The operations are those requiring physical manipulations of physical quantities. Usually, though not necessarily, these quantities take the form of electrical or magnetic signals capable of being stored, transferred, combined, compared, and otherwise manipulated. It has proven convenient at times, principally for reasons of common usage, to refer to these signals as bits, values, elements, symbols, characters, terms, numbers, or the like. [0047] It should be borne in mind, however, that all of these and similar terms are to be associated with the appropriate physical quantities and are merely convenient labels applied to these quantities. Unless specifically stated otherwise as apparent from the following discussion, it is appreciated that throughout the description, discussions utilizing terms such as "processing" or "computing" or "calculating" or "determining" or "displaying" or the like, refer to the action and processes of a computer system, or similar electronic computing device, that manipulates and transforms data represented as physical (electronic) quantities within the computer system's registers and memories into other data similarly represented as physical quantities within the computer system memories or registers or other such information storage, transmission or display devices.
[0048] The algorithms and techniques described herein also relate to apparatus for performing the algorithms and techniques. This apparatus may be specially constructed for the required purposes, or it may comprise a general purpose computer selectively activated or reconfigured by a computer program stored in the computer. Such a
13837061 l.DOC 13 computer program may be stored in a computer readable storage medium, such as, but is not limited to, read-only memories (ROMs), random access memories (RAMs), EPROMs, EEPROMs, magnetic or optical cards, any type of disk including floppy disks, optical disks, CD-ROMs, and magnetic-optical disks, or any type of media suitable for storing electronic instructions, and each coupled to a computer system bus. [0049] It should be noted that not all technologies include the term AP in the literature. For example, SGSN technology does not refer to an access point as an 1AP." However, all wireless access technologies require something comparable (i.e., a node at which wireless communications are received and/or transmitted). For example, an independent basic service set (BSS) includes stations that access the service area by directly communicating with one another; thus, the access nodes are the stations themselves. Accordingly, AP is considered to be generally applicable to any technology, regardless of actual verbiage used to describe a BSS with equivalent functionality.
[0050] As used herein, the term "embodiment" means an embodiment that serves to illustrate by way of example but not limitation.
[0051] It will be appreciated to those skilled in the art that the preceding examples and embodiments are exemplary and not limiting to the scope of the present invention. It is intended that all permutations, enhancements, equivalents, and improvements thereto that are apparent to those skilled in the art upon a reading of the specification and a study of the drawings are included within the true spirit and scope of the present invention. It is therefore intended that the following appended claims include all such modifications, permutations and equivalents as fall within the true spirit and scope of the present invention.
13837061 l.DOC 14

Claims

CLAIMSWhat is claimed is:
1. A device comprising: a plurality of software images embodied in a computer-readable medium; a management interface through which one of the plurality of software images is designated as a boot image; a processor that implements the boot image in a boot procedure; radio hardware through which functionality associated with the boot image is applied to a wireless domain.
2. The device of claim 1, wherein the plurality of software sets include a primary software set and one or more subordinate software sets.
3. The device of claim 1, wherein at least one of the software sets is associated with wireless network connectivity.
4. The device of claim 1, wherein at least one of the software sets is associated with wireless network security.
5. The device of claim 1, further comprising an interface through which new software images may be received.
6. The device of claim 1, wherein the management interface is implemented using XML.
7. A system comprising: an access point (AP), including a management interface, capable of booting from a plurality of software sets; a management engine embodied in a computer-readable medium; wherein, in operation, the management engine selects one of the plurality of software sets with which the AP boots through the management interface of the AP.
8. The system of claim 7, wherein the plurality of software sets include a primary software set and one or more subordinate software sets.
13837061 I DOC 15
9. The system of claim 7, wherein at least one of the software sets is associated with wireless network connectivity.
10. The system of claim 7, wherein at least one of the software sets is associated with wireless network security.
11. The system of claim 7, wherein, in operation, the management engine receives a selection from an administrator and selects the one of the plurality of software sets in accordance with the selection.
12. The system of claim 7, wherein, in operation, the management engine dynamically selects the one of the plurality of software sets.
13. The system of claim 7, wherein, in operation, the management engine uses time of day to select the one of the plurality of software sets.
14. The system of claim 7, wherein, in operation, the management engine prevents observed devices from obtaining wireless connectivity at particular times of day.
15. The system of claim 7, wherein, in operation, the management engine selects the one of the plurality of software sets to enable more detailed investigation of an event.
16. The system of claim 7, further comprising an independent management system, wherein the management engine is included in the independent management system.
17. A method comprising: providing a plurality of software images; selecting a boot image from the plurality of software images; booting an access point (AP) using the boot image.
18. The method of claim 17, further comprising selecting the boot image according to time of day.
19. The method of claim 17, further comprising selecting the boot image to investigate an event.
13837061 I DOC 16
20. The method of claim 17, wherein the boot image is a first boot image, further comprising: setting a risk threshold; assigning a risk score based upon events in a wireless environment; selecting a second boot image from the plurality of software images if the risk score exceeds the risk threshold.
13837061 l.DOC 17
PCT/US2007/089134 2006-12-28 2007-12-28 Application-aware wireless network system and method WO2008083339A2 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US87790706P 2006-12-28 2006-12-28
US60/877,907 2006-12-28

Publications (2)

Publication Number Publication Date
WO2008083339A2 true WO2008083339A2 (en) 2008-07-10
WO2008083339A3 WO2008083339A3 (en) 2008-10-09

Family

ID=39585731

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2007/089134 WO2008083339A2 (en) 2006-12-28 2007-12-28 Application-aware wireless network system and method

Country Status (2)

Country Link
US (1) US7865713B2 (en)
WO (1) WO2008083339A2 (en)

Families Citing this family (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7529925B2 (en) 2005-03-15 2009-05-05 Trapeze Networks, Inc. System and method for distributing keys in a wireless network
US7724703B2 (en) 2005-10-13 2010-05-25 Belden, Inc. System and method for wireless network monitoring
US8638762B2 (en) 2005-10-13 2014-01-28 Trapeze Networks, Inc. System and method for network integrity
US7551619B2 (en) 2005-10-13 2009-06-23 Trapeze Networks, Inc. Identity-based networking
US7573859B2 (en) 2005-10-13 2009-08-11 Trapeze Networks, Inc. System and method for remote monitoring in a wireless network
WO2007044986A2 (en) * 2005-10-13 2007-04-19 Trapeze Networks, Inc. System and method for remote monitoring in a wireless network
US7558266B2 (en) 2006-05-03 2009-07-07 Trapeze Networks, Inc. System and method for restricting network access using forwarding databases
US8966018B2 (en) 2006-05-19 2015-02-24 Trapeze Networks, Inc. Automated network device configuration and network deployment
US7577453B2 (en) 2006-06-01 2009-08-18 Trapeze Networks, Inc. Wireless load balancing across bands
US7912982B2 (en) 2006-06-09 2011-03-22 Trapeze Networks, Inc. Wireless routing selection system and method
US8818322B2 (en) 2006-06-09 2014-08-26 Trapeze Networks, Inc. Untethered access point mesh system and method
US9258702B2 (en) 2006-06-09 2016-02-09 Trapeze Networks, Inc. AP-local dynamic switching
US9191799B2 (en) 2006-06-09 2015-11-17 Juniper Networks, Inc. Sharing data between wireless switches system and method
US7724704B2 (en) 2006-07-17 2010-05-25 Beiden Inc. Wireless VLAN system and method
US8340110B2 (en) 2006-09-15 2012-12-25 Trapeze Networks, Inc. Quality of service provisioning for wireless networks
US8072952B2 (en) 2006-10-16 2011-12-06 Juniper Networks, Inc. Load balancing
US7974235B2 (en) * 2006-11-13 2011-07-05 Telecommunication Systems, Inc. Secure location session manager
US20080151844A1 (en) * 2006-12-20 2008-06-26 Manish Tiwari Wireless access point authentication system and method
US7873061B2 (en) 2006-12-28 2011-01-18 Trapeze Networks, Inc. System and method for aggregation and queuing in a wireless network
US20080226075A1 (en) * 2007-03-14 2008-09-18 Trapeze Networks, Inc. Restricted services for wireless stations
US20080276303A1 (en) * 2007-05-03 2008-11-06 Trapeze Networks, Inc. Network Type Advertising
US8902904B2 (en) 2007-09-07 2014-12-02 Trapeze Networks, Inc. Network assignment based on priority
US8238942B2 (en) 2007-11-21 2012-08-07 Trapeze Networks, Inc. Wireless station location detection
US8150357B2 (en) 2008-03-28 2012-04-03 Trapeze Networks, Inc. Smoothing filter for irregular update intervals
US8474023B2 (en) 2008-05-30 2013-06-25 Juniper Networks, Inc. Proactive credential caching
US8978105B2 (en) 2008-07-25 2015-03-10 Trapeze Networks, Inc. Affirming network relationships and resource access via related networks
US8238298B2 (en) 2008-08-29 2012-08-07 Trapeze Networks, Inc. Picking an optimal channel for an access point in a wireless network
US10536871B2 (en) * 2017-06-30 2020-01-14 Cisco Technology, Inc. Radio sensor coverage estimation for wireless network assurance
US11368555B2 (en) 2018-04-27 2022-06-21 Hewlett Packard Enterprise Development Lp Convert a device to a corresponding device according to seed image
US10911131B1 (en) * 2019-09-12 2021-02-02 Cisco Technology, Inc. Hybrid relay for high density venues
US11451552B2 (en) * 2020-06-04 2022-09-20 Hewlett Packard Enterprise Development Lp Basic service set (BSS) color-based containment and mitigation
US11824884B2 (en) 2020-10-05 2023-11-21 Bank Of America Corporation System for generating responsive actions based on unauthorized access events associated with imitation networks

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5872968A (en) * 1996-10-16 1999-02-16 International Business Machines Corporation Data processing network with boot process using multiple servers
US20050273442A1 (en) * 2004-05-21 2005-12-08 Naftali Bennett System and method of fraud reduction
US20060200862A1 (en) * 2005-03-03 2006-09-07 Cisco Technology, Inc. Method and apparatus for locating rogue access point switch ports in a wireless network related patent applications

Family Cites Families (249)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4176316A (en) 1953-03-30 1979-11-27 International Telephone & Telegraph Corp. Secure single sideband communication system using modulated noise subcarrier
US3641433A (en) * 1969-06-09 1972-02-08 Us Air Force Transmitted reference synchronization system
FR2386211A1 (en) 1977-03-31 1978-10-27 Europ Teletransmission DIGITAL COMMUNICATION SYSTEM
US4291409A (en) 1978-06-20 1981-09-22 The Mitre Corporation Spread spectrum communications method and apparatus
CH622661B (en) 1978-11-30 Ebauches Bettlach Sa DEVICE FOR FIXING A WATCHMAKING DIAL ON THE PLATE OF A WATCH MOVEMENT.
US4247908A (en) * 1978-12-08 1981-01-27 Motorola, Inc. Re-linked portable data terminal controller system
US4730340A (en) * 1980-10-31 1988-03-08 Harris Corp. Programmable time invariant coherent spread symbol correlator
US4503533A (en) * 1981-08-20 1985-03-05 Stanford University Local area communication network utilizing a round robin access scheme with improved channel utilization
US4500987A (en) * 1981-11-24 1985-02-19 Nippon Electric Co., Ltd. Loop transmission system
US4475208A (en) 1982-01-18 1984-10-02 Ricketts James A Wired spread spectrum data communication system
US4758717A (en) 1982-01-25 1988-07-19 Symbol Technologies, Inc. Narrow-bodied, single-and twin-windowed portable laser scanning head for reading bar code symbols
US4673805A (en) 1982-01-25 1987-06-16 Symbol Technologies, Inc. Narrow-bodied, single- and twin-windowed portable scanning head for reading bar code symbols
US4736095A (en) * 1982-01-25 1988-04-05 Symbol Technologies, Inc. Narrow-bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols
US4460120A (en) 1982-01-25 1984-07-17 Symbol Technologies, Inc. Narrow bodied, single- and twin-windowed portable laser scanning head for reading bar code symbols
US4409470A (en) 1982-01-25 1983-10-11 Symbol Technologies, Inc. Narrow-bodied, single-and twin-windowed portable laser scanning head for reading bar code symbols
US4494238A (en) * 1982-06-30 1985-01-15 Motorola, Inc. Multiple channel data link system
US4550414A (en) 1983-04-12 1985-10-29 Charles Stark Draper Laboratory, Inc. Spread spectrum adaptive code tracker
US4707839A (en) 1983-09-26 1987-11-17 Harris Corporation Spread spectrum correlator for recovering CCSK data from a PN spread MSK waveform
US4644523A (en) * 1984-03-23 1987-02-17 Sangamo Weston, Inc. System for improving signal-to-noise ratio in a direct sequence spread spectrum signal receiver
US4562415A (en) 1984-06-22 1985-12-31 Motorola, Inc. Universal ultra-precision PSK modulator with time multiplexed modes of varying modulation types
US4630264A (en) 1984-09-21 1986-12-16 Wah Benjamin W Efficient contention-resolution protocol for local multiaccess networks
US4639914A (en) * 1984-12-06 1987-01-27 At&T Bell Laboratories Wireless PBX/LAN system with optimum combining
JPH0693670B2 (en) 1984-12-29 1994-11-16 京セラ株式会社 Spread spectrum communication system
US4635221A (en) * 1985-01-18 1987-01-06 Allied Corporation Frequency multiplexed convolver communication system
US4672658A (en) 1985-10-16 1987-06-09 At&T Company And At&T Bell Laboratories Spread spectrum wireless PBX
US4850009A (en) 1986-05-12 1989-07-18 Clinicom Incorporated Portable handheld terminal including optical bar code reader and electromagnetic transceiver means for interactive wireless communication with a base communications station
IL82561A (en) * 1986-05-27 1991-12-15 Fairchild Weston Systems Inc Secure communication system for multiple remote units
US4740792A (en) * 1986-08-27 1988-04-26 Hughes Aircraft Company Vehicle location system
US4901307A (en) * 1986-10-17 1990-02-13 Qualcomm, Inc. Spread spectrum multiple access communication system using satellite or terrestrial repeaters
US4995053A (en) 1987-02-11 1991-02-19 Hillier Technologies Limited Partnership Remote control system, components and methods
US4789983A (en) 1987-03-05 1988-12-06 American Telephone And Telegraph Company, At&T Bell Laboratories Wireless network for wideband indoor communications
JPH0671241B2 (en) 1987-09-10 1994-09-07 株式会社ケンウッド Initial synchronization method for spread spectrum communication
US4894842A (en) * 1987-10-15 1990-01-16 The Charles Stark Draper Laboratory, Inc. Precorrelation digital spread spectrum receiver
US4872182A (en) 1988-03-08 1989-10-03 Harris Corporation Frequency management system for use in multistation H.F. communication network
FR2629931B1 (en) 1988-04-08 1991-01-25 Lmt Radio Professionelle ASYNCHRONOUS DIGITAL CORRELATOR AND DEMODULATORS COMPRISING SUCH A CORRELATOR
US5483676A (en) * 1988-08-04 1996-01-09 Norand Corporation Mobile radio data communication system and method
US5103461A (en) * 1989-06-29 1992-04-07 Symbol Technologies, Inc. Signal quality measure in packet data communication
US5815811A (en) 1989-06-29 1998-09-29 Symbol Technologies, Inc. Preemptive roaming in a cellular local area wireless network
US5157687A (en) 1989-06-29 1992-10-20 Symbol Technologies, Inc. Packet data communication network
US5029183A (en) 1989-06-29 1991-07-02 Symbol Technologies, Inc. Packet data communication network
US5280498A (en) * 1989-06-29 1994-01-18 Symbol Technologies, Inc. Packet data communication system
US5142550A (en) 1989-06-29 1992-08-25 Symbol Technologies, Inc. Packet data communication system
US5528621A (en) 1989-06-29 1996-06-18 Symbol Technologies, Inc. Packet data communication system
US5668803A (en) 1989-06-29 1997-09-16 Symbol Technologies, Inc. Protocol for packet data communication system
JP2660441B2 (en) * 1989-07-03 1997-10-08 双葉電子工業 株式会社 Receiver for spread spectrum communication
US5109390A (en) * 1989-11-07 1992-04-28 Qualcomm Incorporated Diversity receiver in a cdma cellular telephone system
US5187575A (en) * 1989-12-29 1993-02-16 Massachusetts Institute Of Technology Source adaptive television system
US5103459B1 (en) * 1990-06-25 1999-07-06 Qualcomm Inc System and method for generating signal waveforms in a cdma cellular telephone system
US5231633A (en) 1990-07-11 1993-07-27 Codex Corporation Method for prioritizing, selectively discarding, and multiplexing differing traffic type fast packets
US5584048A (en) 1990-08-17 1996-12-10 Motorola, Inc. Beacon based packet radio standby energy saver
US5151919A (en) 1990-12-17 1992-09-29 Ericsson-Ge Mobile Communications Holding Inc. Cdma subtractive demodulation
TW327488U (en) 1991-05-29 1998-02-21 Video Tech Eng Digital cordless telephone apparatus
FI100043B (en) 1992-01-23 1997-08-29 Nokia Telecommunications Oy Cellular radio network design method and system
US5267261A (en) 1992-03-05 1993-11-30 Qualcomm Incorporated Mobile station assisted soft handoff in a CDMA cellular communications system
US5896561A (en) * 1992-04-06 1999-04-20 Intermec Ip Corp. Communication network having a dormant polling protocol
US5418812A (en) 1992-06-26 1995-05-23 Symbol Technologies, Inc. Radio network initialization method and apparatus
US5285494A (en) * 1992-07-31 1994-02-08 Pactel Corporation Network management system
GB9223890D0 (en) 1992-11-13 1993-01-06 Ncr Int Inc Wireless local area network system
US5465401A (en) 1992-12-15 1995-11-07 Texas Instruments Incorporated Communication system and methods for enhanced information transfer
GB9304636D0 (en) 1993-03-06 1993-04-21 Ncr Int Inc A method of accessing a communication system
US5568513A (en) 1993-05-11 1996-10-22 Ericsson Inc. Standby power savings with cumulative parity check in mobile phones
US5933607A (en) 1993-06-07 1999-08-03 Telstra Corporation Limited Digital communication system for simultaneous transmission of data from constant and variable rate sources
DE4326749C2 (en) 1993-08-05 1995-05-04 Klaus Dr Ing Jaeckel Local ISDN radio transmission system
US5491644A (en) * 1993-09-07 1996-02-13 Georgia Tech Research Corporation Cell engineering tool and methods
US5598532A (en) * 1993-10-21 1997-01-28 Optimal Networks Method and apparatus for optimizing computer networks
US5488569A (en) * 1993-12-20 1996-01-30 At&T Corp. Application-oriented telecommunication system interface
US5450615A (en) 1993-12-22 1995-09-12 At&T Corp. Prediction of indoor electromagnetic wave propagation for wireless indoor systems
JP3839473B2 (en) * 1994-01-05 2006-11-01 トムソン コンシユーマ エレクトロニクス インコーポレイテツド Cordless telephone channel selection system
CA2176401C (en) 1994-02-17 2003-07-08 John H. Cafarella A high-data-rate wireless local-area network
US5594782A (en) * 1994-02-24 1997-01-14 Gte Mobile Communications Service Corporation Multiple mode personal wireless communications system
US5655148A (en) * 1994-05-27 1997-08-05 Microsoft Corporation Method for automatically configuring devices including a network adapter without manual intervention and without prior configuration information
US5517495A (en) * 1994-12-06 1996-05-14 At&T Corp. Fair prioritized scheduling in an input-buffered switch
US5519762A (en) * 1994-12-21 1996-05-21 At&T Corp. Adaptive power cycling for a cordless telephone
US5915214A (en) 1995-02-23 1999-06-22 Reece; Richard W. Mobile communication service provider selection system
US5828960A (en) 1995-03-31 1998-10-27 Motorola, Inc. Method for wireless communication system planning
US5630207A (en) * 1995-06-19 1997-05-13 Lucent Technologies Inc. Methods and apparatus for bandwidth reduction in a two-way paging system
JP2771478B2 (en) 1995-06-20 1998-07-02 静岡日本電気株式会社 Wireless selective call receiver with display function
US5649289A (en) 1995-07-10 1997-07-15 Motorola, Inc. Flexible mobility management in a two-way messaging system and method therefor
JPH0936799A (en) 1995-07-21 1997-02-07 Toshiba Corp Radio communication equipment
US5794128A (en) 1995-09-20 1998-08-11 The United States Of America As Represented By The Secretary Of The Army Apparatus and processes for realistic simulation of wireless information transport systems
US5721733A (en) 1995-10-13 1998-02-24 General Wireless Communications, Inc. Wireless network access scheme
US6580700B1 (en) 1995-10-27 2003-06-17 Symbol Technologies, Inc. Data rate algorithms for use in wireless local area networks
US5920821A (en) 1995-12-04 1999-07-06 Bell Atlantic Network Services, Inc. Use of cellular digital packet data (CDPD) communications to convey system identification list data to roaming cellular subscriber stations
US5987062A (en) 1995-12-15 1999-11-16 Netwave Technologies, Inc. Seamless roaming for wireless local area networks
US5838907A (en) 1996-02-20 1998-11-17 Compaq Computer Corporation Configuration manager for network devices and an associated method for providing configuration information thereto
US6118771A (en) 1996-03-14 2000-09-12 Kabushiki Kaisha Toshiba System and method for controlling communication
US5933420A (en) * 1996-04-30 1999-08-03 3Com Corporation Method and apparatus for assigning spectrum of a wireless local area network
US6697415B1 (en) * 1996-06-03 2004-02-24 Broadcom Corporation Spread spectrum transceiver module utilizing multiple mode transmission
JPH1021599A (en) * 1996-06-28 1998-01-23 Matsushita Electric Ind Co Ltd Magnetic field modulation recording and reproducing method using super resolution recording medium
US6088591A (en) 1996-06-28 2000-07-11 Aironet Wireless Communications, Inc. Cellular system hand-off protocol
US5949988A (en) 1996-07-16 1999-09-07 Lucent Technologies Inc. Prediction system for RF power distribution
US5991817A (en) * 1996-09-06 1999-11-23 Cisco Systems, Inc. Apparatus and method for a network router
US5844900A (en) 1996-09-23 1998-12-01 Proxim, Inc. Method and apparatus for optimizing a medium access control protocol
US5875179A (en) * 1996-10-29 1999-02-23 Proxim, Inc. Method and apparatus for synchronized communication over wireless backbone architecture
US6011784A (en) * 1996-12-18 2000-01-04 Motorola, Inc. Communication system and method using asynchronous and isochronous spectrum for voice and data
US6078568A (en) 1997-02-25 2000-06-20 Telefonaktiebolaget Lm Ericsson Multiple access communication network with dynamic access control
US6240083B1 (en) * 1997-02-25 2001-05-29 Telefonaktiebolaget L.M. Ericsson Multiple access communication network with combined contention and reservation mode access
JPH10261980A (en) 1997-03-18 1998-09-29 Fujitsu Ltd Base station unit for radio communication network, communication control method for radio communication network, radio communication network system and radio terminal
US5987328A (en) 1997-04-24 1999-11-16 Ephremides; Anthony Method and device for placement of transmitters in wireless networks
US6075814A (en) 1997-05-09 2000-06-13 Broadcom Homenetworking, Inc. Method and apparatus for reducing signal processing requirements for transmitting packet-based data with a modem
US5982779A (en) 1997-05-28 1999-11-09 Lucent Technologies Inc. Priority access for real-time traffic in contention-based networks
US6199032B1 (en) * 1997-07-23 2001-03-06 Edx Engineering, Inc. Presenting an output signal generated by a receiving device in a simulated communication system
EP0898434B1 (en) * 1997-08-20 2004-05-26 NEC USA, Inc. ATM switching architecture for a wireless telecommunications network
US6119009A (en) 1997-09-18 2000-09-12 Lucent Technologies, Inc. Method and apparatus for modeling the propagation of wireless signals in buildings
US5953669A (en) 1997-12-11 1999-09-14 Motorola, Inc. Method and apparatus for predicting signal characteristics in a wireless communication system
US6356758B1 (en) * 1997-12-31 2002-03-12 Nortel Networks Limited Wireless tools for data manipulation and visualization
KR100257184B1 (en) 1998-01-31 2000-05-15 정장호 Optic relay system for extending coverage
US6115385A (en) 1998-03-11 2000-09-05 Cisco Technology, Inc. Method and system for subnetting in a switched IP network
GB9810843D0 (en) 1998-05-21 1998-07-22 3Com Technologies Ltd Method for storing data in network devices
US6594238B1 (en) * 1998-06-19 2003-07-15 Telefonaktiebolaget Lm Ericsson (Publ) Method and apparatus for dynamically adapting a connection state in a mobile communications system
US6725260B1 (en) * 1998-09-11 2004-04-20 L.V. Partners, L.P. Method and apparatus for configuring configurable equipment with configuration information received from a remote location
US6101539A (en) 1998-10-02 2000-08-08 Kennelly; Richard J. Dynamic presentation of management objectives based on administrator privileges
US6160804A (en) 1998-11-13 2000-12-12 Lucent Technologies Inc. Mobility management for a multimedia mobile network
US6336035B1 (en) * 1998-11-19 2002-01-01 Nortel Networks Limited Tools for wireless network planning
US6218930B1 (en) * 1999-03-10 2001-04-17 Merlot Communications Apparatus and method for remotely powering access equipment over a 10/100 switched ethernet network
US6614787B1 (en) 1999-03-30 2003-09-02 3Com Corporation System and method for efficiently handling multicast packets by aggregating VLAN context
US6839348B2 (en) * 1999-04-30 2005-01-04 Cisco Technology, Inc. System and method for distributing multicasts in virtual local area networks
US6208841B1 (en) * 1999-05-03 2001-03-27 Qualcomm Incorporated Environmental simulator for a wireless communication device
US6285662B1 (en) 1999-05-14 2001-09-04 Nokia Mobile Phones Limited Apparatus, and associated method for selecting a size of a contention window for a packet of data system
US6317599B1 (en) 1999-05-26 2001-11-13 Wireless Valley Communications, Inc. Method and system for automated optimization of antenna positioning in 3-D
US6493679B1 (en) 1999-05-26 2002-12-10 Wireless Valley Communications, Inc. Method and system for managing a real time bill of materials
US6892230B1 (en) 1999-06-11 2005-05-10 Microsoft Corporation Dynamic self-configuration for ad hoc peer networking using mark-up language formated description messages
US6393290B1 (en) * 1999-06-30 2002-05-21 Lucent Technologies Inc. Cost based model for wireless architecture
US6760324B1 (en) 1999-09-10 2004-07-06 Array Telecom Corporation Method, system, and computer program product for providing voice over the internet communication
US6631267B1 (en) 1999-11-04 2003-10-07 Lucent Technologies Inc. Road-based evaluation and interpolation of wireless network parameters
US6587680B1 (en) 1999-11-23 2003-07-01 Nokia Corporation Transfer of security association during a mobile terminal handover
AU2001231175A1 (en) 2000-01-26 2001-08-07 Vyyo, Ltd. Quality of service scheduling scheme for a broadband wireless access system
US6512916B1 (en) * 2000-02-23 2003-01-28 America Connect, Inc. Method for selecting markets in which to deploy fixed wireless communication systems
FI109163B (en) 2000-02-24 2002-05-31 Nokia Corp Method and apparatus for supporting mobility in a telecommunication system
US7024394B1 (en) * 2000-07-07 2006-04-04 International Business Machines Corporation System and method for protecting user logoff from web business transactions
US6985465B2 (en) * 2000-07-07 2006-01-10 Koninklijke Philips Electronics N.V. Dynamic channel selection scheme for IEEE 802.11 WLANs
US6659947B1 (en) 2000-07-13 2003-12-09 Ge Medical Systems Information Technologies, Inc. Wireless LAN architecture for integrated time-critical and non-time-critical services within medical facilities
US7020773B1 (en) * 2000-07-17 2006-03-28 Citrix Systems, Inc. Strong mutual authentication of devices
US6404772B1 (en) 2000-07-27 2002-06-11 Symbol Technologies, Inc. Voice and data wireless communications network and method
US6625454B1 (en) 2000-08-04 2003-09-23 Wireless Valley Communications, Inc. Method and system for designing or deploying a communications network which considers frequency dependent effects
US6687498B2 (en) * 2000-08-14 2004-02-03 Vesuvius Inc. Communique system with noncontiguous communique coverage areas in cellular communication networks
US7280495B1 (en) 2000-08-18 2007-10-09 Nortel Networks Limited Reliable broadcast protocol in a wireless local area network
US7373425B2 (en) * 2000-08-22 2008-05-13 Conexant Systems, Inc. High-speed MAC address search engine
US6973622B1 (en) 2000-09-25 2005-12-06 Wireless Valley Communications, Inc. System and method for design, tracking, measurement, prediction and optimization of data communication networks
US6937576B1 (en) 2000-10-17 2005-08-30 Cisco Technology, Inc. Multiple instance spanning tree protocol
US6954790B2 (en) 2000-12-05 2005-10-11 Interactive People Unplugged Ab Network-based mobile workgroup system
US6978301B2 (en) 2000-12-06 2005-12-20 Intelliden System and method for configuring a network device
US7155518B2 (en) 2001-01-08 2006-12-26 Interactive People Unplugged Ab Extranet workgroup formation across multiple mobile virtual private networks
US7133909B2 (en) 2001-01-12 2006-11-07 Microsoft Corporation Systems and methods for locating mobile computer users in a wireless network
US20020101868A1 (en) 2001-01-30 2002-08-01 David Clear Vlan tunneling protocol
EP1257092B1 (en) 2001-05-08 2005-01-05 Agere Systems Guardian Corporation Dynamic frequency selection in a wireless LAN with channel swapping between access points
US7483411B2 (en) 2001-06-04 2009-01-27 Nec Corporation Apparatus for public access mobility LAN and method of operation thereof
US7231521B2 (en) * 2001-07-05 2007-06-12 Lucent Technologies Inc. Scheme for authentication and dynamic key exchange
US7313819B2 (en) * 2001-07-20 2007-12-25 Intel Corporation Automated establishment of addressability of a network device for a target network environment
JP2003069570A (en) * 2001-08-27 2003-03-07 Allied Tereshisu Kk Management system
US20030107590A1 (en) 2001-11-07 2003-06-12 Phillippe Levillain Policy rule management for QoS provisioning
US7406319B2 (en) 2001-11-19 2008-07-29 At&T Corp. WLAN having load balancing by access point admission/termination
CA2414789A1 (en) 2002-01-09 2003-07-09 Peel Wireless Inc. Wireless networks security system
US7076760B2 (en) * 2002-01-31 2006-07-11 Cadence Design Systems, Inc. Method and apparatus for specifying encoded sub-networks
US6879812B2 (en) * 2002-02-08 2005-04-12 Networks Associates Technology Inc. Portable computing device and associated method for analyzing a wireless local area network
JP3904462B2 (en) * 2002-02-12 2007-04-11 株式会社日立製作所 Wireless communication method and wireless communication system
US7535913B2 (en) * 2002-03-06 2009-05-19 Nvidia Corporation Gigabit ethernet adapter supporting the iSCSI and IPSEC protocols
US20030174706A1 (en) 2002-03-15 2003-09-18 Broadcom Corporation Fastpath implementation for transparent local area network (LAN) services over multiprotocol label switching (MPLS)
US6839338B1 (en) * 2002-03-20 2005-01-04 Utstarcom Incorporated Method to provide dynamic internet protocol security policy service
US7711809B2 (en) 2002-04-04 2010-05-04 Airmagnet, Inc. Detecting an unauthorized station in a wireless local area network
US6624762B1 (en) 2002-04-11 2003-09-23 Unisys Corporation Hardware-based, LZW data compression co-processor
JP3917622B2 (en) * 2002-05-20 2007-05-23 富士通株式会社 Network relay device, network relay method, network relay program
WO2003105353A2 (en) 2002-06-11 2003-12-18 Meshnetworks, Inc. System and method for multicast media access using broadcast transmissions with multiple acknowledgments in an ad-hoc communications network
US20050193103A1 (en) 2002-06-18 2005-09-01 John Drabik Method and apparatus for automatic configuration and management of a virtual private network
AU2003245633A1 (en) 2002-06-21 2004-01-06 Thomson Licensing S.A. Registration of a wlan as a umts routing area for wlan-umts interworking
US7965842B2 (en) * 2002-06-28 2011-06-21 Wavelink Corporation System and method for detecting unauthorized wireless access points
EP1383353B1 (en) 2002-07-05 2005-04-13 Alcatel Resource admission control in an access network
US7509096B2 (en) * 2002-07-26 2009-03-24 Broadcom Corporation Wireless access point setup and management within wireless local area network
US7017186B2 (en) * 2002-07-30 2006-03-21 Steelcloud, Inc. Intrusion detection system using self-organizing clusters
US7068999B2 (en) 2002-08-02 2006-06-27 Symbol Technologies, Inc. System and method for detection of a rogue wireless access point in a wireless communication network
EP1389812A1 (en) 2002-08-13 2004-02-18 Agilent Technologies Inc A mounting arrangement for high frequency electro-optical components
WO2004023307A1 (en) 2002-09-06 2004-03-18 O2Micro, Inc. Vpn and firewall integrated system
US7680086B2 (en) * 2002-09-09 2010-03-16 Siemens Canada Limited Wireless local area network with clients having extended freedom of movement
US7245918B2 (en) * 2002-09-18 2007-07-17 Telefonaktiebolaget Lm Ericsson (Publ) Distributing shared network access information in a shared network mobile communications system
US6957067B1 (en) 2002-09-24 2005-10-18 Aruba Networks System and method for monitoring and enforcing policy within a wireless network
US7130917B2 (en) * 2002-09-26 2006-10-31 Cisco Technology, Inc. Quality of service in a gateway
US7440573B2 (en) * 2002-10-08 2008-10-21 Broadcom Corporation Enterprise wireless local area network switching system
US7369859B2 (en) 2003-10-17 2008-05-06 Kineto Wireless, Inc. Method and system for determining the location of an unlicensed mobile access subscriber
US7062566B2 (en) 2002-10-24 2006-06-13 3Com Corporation System and method for using virtual local area network tags with a virtual private network
US7421248B1 (en) 2002-11-12 2008-09-02 Cisco Technology, Inc. Method and apparatus for adjusting operational parameter of a wireless device bases upon a monitored characteristic
US20040203752A1 (en) 2002-11-18 2004-10-14 Toshiba America Information Systems, Inc. Mobility communications system
US8139551B2 (en) * 2002-11-19 2012-03-20 Toshiba America Research, Inc. Quality of service (QoS) assurance system using data transmission control
WO2004095800A1 (en) 2003-04-17 2004-11-04 Cisco Technology, Inc 802.11 using a compressed reassociation exchange to facilitate fast handoff
US7020438B2 (en) * 2003-01-09 2006-03-28 Nokia Corporation Selection of access point in a wireless communication system
US7295960B2 (en) 2003-01-22 2007-11-13 Wireless Valley Communications, Inc. System and method for automated placement or configuration of equipment for obtaining desired network performance objectives
US7266089B2 (en) 2003-02-21 2007-09-04 Qwest Communications International Inc. Systems and methods for creating a wireless network
US20050070263A1 (en) 2003-02-24 2005-03-31 Floyd Backes Wireless access point protocol logic
US20040208570A1 (en) 2003-04-18 2004-10-21 Reader Scot A. Wavelength-oriented virtual networks
WO2004095192A2 (en) 2003-04-21 2004-11-04 Airdefense, Inc. Systems and methods for securing wireless computer networks
US7359676B2 (en) * 2003-04-21 2008-04-15 Airdefense, Inc. Systems and methods for adaptively scanning for wireless communications
US20040259555A1 (en) 2003-04-23 2004-12-23 Rappaport Theodore S. System and method for predicting network performance and position location using multiple table lookups
WO2004097584A2 (en) 2003-04-28 2004-11-11 P.G.I. Solutions Llc Method and system for remote network security management
US7849217B2 (en) 2003-04-30 2010-12-07 Cisco Technology, Inc. Mobile ethernet
US6925378B2 (en) 2003-05-12 2005-08-02 Circumnav Networks, Inc. Enhanced mobile communication device with extended radio, and applications
US8108916B2 (en) 2003-05-21 2012-01-31 Wayport, Inc. User fraud detection and prevention of access to a distributed network communication system
EP1482686A3 (en) * 2003-05-28 2005-01-26 Broadcom Corporation Extending the mobility of a wireless headset by using access points of a wireless local area network (WLAN)
US7257107B2 (en) * 2003-07-15 2007-08-14 Highwall Technologies, Llc Device and method for detecting unauthorized, “rogue” wireless LAN access points
JP4211529B2 (en) 2003-08-06 2009-01-21 日本電気株式会社 Channel selection method and radio station and program used therefor
WO2005024598A2 (en) * 2003-09-09 2005-03-17 Oto Software, Inc Method and system for securing and monitoring a wireless network
US7324468B2 (en) * 2003-09-10 2008-01-29 Broadcom Corporation System and method for medium access control in a power-save network
US20050073980A1 (en) * 2003-09-17 2005-04-07 Trapeze Networks, Inc. Wireless LAN management
US20050059405A1 (en) * 2003-09-17 2005-03-17 Trapeze Networks, Inc. Simulation driven wireless LAN planning
US20050059406A1 (en) * 2003-09-17 2005-03-17 Trapeze Networks, Inc. Wireless LAN measurement feedback
US7221946B2 (en) * 2003-09-22 2007-05-22 Broadcom Corporation Automatic quality of service based resource allocation
US7110756B2 (en) 2003-10-03 2006-09-19 Cognio, Inc. Automated real-time site survey in a shared frequency band environment
US20050157730A1 (en) 2003-10-31 2005-07-21 Grant Robert H. Configuration management for transparent gateways in heterogeneous storage networks
US9131272B2 (en) 2003-11-04 2015-09-08 Universal Electronics Inc. System and method for saving and recalling state data for media and home appliances
US20050223111A1 (en) 2003-11-04 2005-10-06 Nehru Bhandaru Secure, standards-based communications across a wide-area network
US20050122977A1 (en) 2003-12-05 2005-06-09 Microsoft Corporation Efficient download mechanism for devices with limited local storage
US7002943B2 (en) 2003-12-08 2006-02-21 Airtight Networks, Inc. Method and system for monitoring a selected region of an airspace associated with local area networks of computing devices
US7466678B2 (en) 2003-12-29 2008-12-16 Lenovo (Singapore) Pte. Ltd. System and method for passive scanning of authorized wireless channels
US7221927B2 (en) 2004-02-13 2007-05-22 Trapeze Networks, Inc. Station mobility between access points
US7489648B2 (en) * 2004-03-11 2009-02-10 Cisco Technology, Inc. Optimizing 802.11 power-save for VLAN
US20050245269A1 (en) 2004-04-30 2005-11-03 Intel Corporation Channel scanning in wireless networks
US7376080B1 (en) 2004-05-11 2008-05-20 Packeteer, Inc. Packet load shedding
DE102004028555A1 (en) * 2004-06-15 2006-02-16 Zf Friedrichshafen Ag Pedal arrangement for a motor vehicle
GR1005055B (en) * 2004-08-27 2005-12-06 Atmel Corporation Method and system for aquality of service mechanism for a wireless network
US7317914B2 (en) * 2004-09-24 2008-01-08 Microsoft Corporation Collaboratively locating disconnected clients and rogue access points in a wireless network
US20060104224A1 (en) 2004-10-13 2006-05-18 Gurminder Singh Wireless access point with fingerprint authentication
US7224970B2 (en) 2004-10-26 2007-05-29 Motorola, Inc. Method of scanning for beacon transmissions in a WLAN
JP4433400B2 (en) 2004-12-09 2010-03-17 レノボ シンガポール プライヴェート リミテッド Wireless network communication card, device incorporating the card, device supporting wireless network communication, and method of detecting a wireless access point for wireless network communication
US7725938B2 (en) 2005-01-20 2010-05-25 Cisco Technology, Inc. Inline intrusion detection
US7630713B2 (en) 2005-02-18 2009-12-08 Lenovo (Singapore) Pte Ltd. Apparatus, system, and method for rapid wireless network association
US7529925B2 (en) 2005-03-15 2009-05-05 Trapeze Networks, Inc. System and method for distributing keys in a wireless network
US20060245393A1 (en) 2005-04-27 2006-11-02 Symbol Technologies, Inc. Method, system and apparatus for layer 3 roaming in wireless local area networks (WLANs)
CA2608721C (en) 2005-05-18 2011-10-18 Telcordia Technologies, Inc. Seamless handoff across heterogeneous access networks using a handoff controller
US8775571B2 (en) * 2005-06-07 2014-07-08 Extreme Networks, Inc. Methods, systems, and computer program products for dynamic network access device port and user device configuration for implementing device-based and user-based policies
US7724717B2 (en) * 2005-07-22 2010-05-25 Sri International Method and apparatus for wireless network security
TW200708125A (en) * 2005-08-08 2007-02-16 Giga Byte Tech Co Ltd Communication apparatus
US7561599B2 (en) * 2005-09-19 2009-07-14 Motorola, Inc. Method of reliable multicasting
US20070070937A1 (en) * 2005-09-28 2007-03-29 Mustafa Demirhan Multi-radio mesh network channel selection and load balancing
US20070083924A1 (en) * 2005-10-08 2007-04-12 Lu Hongqian K System and method for multi-stage packet filtering on a networked-enabled device
US7573859B2 (en) 2005-10-13 2009-08-11 Trapeze Networks, Inc. System and method for remote monitoring in a wireless network
US7724703B2 (en) * 2005-10-13 2010-05-25 Belden, Inc. System and method for wireless network monitoring
US7551619B2 (en) 2005-10-13 2009-06-23 Trapeze Networks, Inc. Identity-based networking
US7688755B2 (en) * 2005-10-25 2010-03-30 Motorola, Inc. Method and apparatus for group leader selection in wireless multicast service
US20070260720A1 (en) 2006-05-03 2007-11-08 Morain Gary E Mobility domain
US7577453B2 (en) 2006-06-01 2009-08-18 Trapeze Networks, Inc. Wireless load balancing across bands
US7912982B2 (en) 2006-06-09 2011-03-22 Trapeze Networks, Inc. Wireless routing selection system and method
US9191799B2 (en) 2006-06-09 2015-11-17 Juniper Networks, Inc. Sharing data between wireless switches system and method
JP2009543074A (en) 2006-07-07 2009-12-03 スカイフック ワイヤレス,インク. System and method for collecting information from a WLAN-enabled access point to estimate the location of a WLAN positioning device
TW200805994A (en) * 2006-07-11 2008-01-16 Wistron Neweb Corp A method of establishing wireless network connection for a mobile phone and a mobile phone using the same
US7724704B2 (en) * 2006-07-17 2010-05-25 Beiden Inc. Wireless VLAN system and method
US7813744B2 (en) * 2006-08-31 2010-10-12 Polycom, Inc. Method for determining DFS channel availability in a wireless LAN
KR100758354B1 (en) * 2006-09-01 2007-09-14 삼성전자주식회사 Method for scanning access points during station's handoff procedure in wireless communication system and station of performing the method, and network interface of supporting the method and wireless communication system of enabling the method
US8072952B2 (en) * 2006-10-16 2011-12-06 Juniper Networks, Inc. Load balancing
US20080107077A1 (en) 2006-11-03 2008-05-08 James Murphy Subnet mobility supporting wireless handoff
US20080151844A1 (en) 2006-12-20 2008-06-26 Manish Tiwari Wireless access point authentication system and method
US7788475B2 (en) * 2006-12-28 2010-08-31 Intel Corporation Booting utilizing electronic mail

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5872968A (en) * 1996-10-16 1999-02-16 International Business Machines Corporation Data processing network with boot process using multiple servers
US20050273442A1 (en) * 2004-05-21 2005-12-08 Naftali Bennett System and method of fraud reduction
US20060200862A1 (en) * 2005-03-03 2006-09-07 Cisco Technology, Inc. Method and apparatus for locating rogue access point switch ports in a wireless network related patent applications

Also Published As

Publication number Publication date
US20080162921A1 (en) 2008-07-03
WO2008083339A3 (en) 2008-10-09
US7865713B2 (en) 2011-01-04

Similar Documents

Publication Publication Date Title
US7865713B2 (en) Application-aware wireless network system and method
US20170250870A1 (en) Virtual network policy configuration method and system, and virtual network element and network administration system thereof
CN102255919B (en) System and method for optimizing execution of security task in LAN
EP2769571B1 (en) Mobile risk assessment
US10826939B2 (en) Blended honeypot
EP2472400A2 (en) System and method for remote administration of computer network
US20110283138A1 (en) Change Tracking and Management in Distributed Applications
US10785234B2 (en) Dynamic packet inspection plan system utilizing rule probability based selection
CN108605264B (en) Method and apparatus for network management
US8625462B2 (en) Ownership requests for access points
US11210128B2 (en) Device virtualization security layer
US20080172742A1 (en) Information processing system
US20120226787A1 (en) Optimizing use of internet protocol addresses
EP3864883A1 (en) Providing service using network slicing
Alsumayt et al. Detect DoS attack using MrDR method in merging two MANETs
US20210377737A1 (en) Secure attestation packages for devices on a wireless network
Carvalho et al. When agile security meets 5G
US20220191716A1 (en) Updating Record of Border Cells
Talpur et al. Adversarial attacks against deep reinforcement learning framework in internet of vehicles
CN111478787B (en) AP restarting method and management equipment
CN104038558A (en) Method and system for controlling application networking
CN105991343A (en) Update method and device of feature libraries
US11937091B2 (en) Providing service using network slicing
CN112188593B (en) Wireless configuration method and device, storage medium and electronic device
US20240064175A1 (en) Computing power network system

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07866104

Country of ref document: EP

Kind code of ref document: A2

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07866104

Country of ref document: EP

Kind code of ref document: A2