Roaming and transition patterns coding in wireless networks for cognitive visibility

Patent metadata

Field	Value
Publication number	US-11405802-B2
Application number	US-202016905210-A
Country	US
Kind code	B2
Filing date	Jun 18, 2020
Priority date	Jun 8, 2017
Publication date	Aug 2, 2022
Grant date	Aug 2, 2022

Abstract

In one embodiment, a device receives data regarding usage of access points in a network by a plurality of clients in the network. The device maintains an access point graph that represents the access points in the network as vertices of the access point graph. The device generates, for each of the plurality of clients, client trajectories as trajectory subgraphs of the access point graph. A particular client trajectory for a particular client comprises a set of edges between a subset of the vertices of the access point graph and represents transitions between access points in the network performed by the particular client. The device identifies a transition pattern from the client trajectories by deconstructing the trajectory subgraphs. The device uses the identified transition pattern to effect a configuration change in the network.

First claim

What is claimed is:

1. A method comprising:
receiving, at a device, data regarding usage of access points in a network by a plurality of clients in the network;
maintaining, by the device, an access point graph that represents the access points in the network as vertices of the access point graph;
generating, by the device and for each of the plurality of clients, client trajectories as trajectory subgraphs of the access point graph, wherein a particular client trajectory for a particular client is indicative of transitions between access points in the network performed by the particular client, and further wherein an end of the particular client trajectory corresponds to an access point transition performed by the particular client for which a subsequent access point transition performed by the particular client is not observed within a predefined amount of time;
identifying, by the device, a transition pattern from the client trajectories by deconstructing the trajectory subgraphs; and
providing, by the device, an indication of the transition pattern to a user interface.

2. The method as in claim 1 , further comprising:
using, by the device, the transition pattern to effect a configuration change in the network.

3. The method as in claim 1 , wherein identifying the transition pattern from the client trajectories by deconstructing the trajectory subgraphs comprises:
performing, by the device, frequent subgraph mining on the trajectory subgraphs, to identify the transition pattern.

4. The method as in claim 1 , wherein identifying the transition pattern from the client trajectories by deconstructing the trajectory subgraphs comprises:
representing, by the device, edges of the trajectory subgraphs as entries in feature vectors for the client trajectories; and
applying, by the device, dictionary learning to the entries in the feature vectors for the client trajectories, to identify the transition pattern.

5. The method as in claim 4 , further comprising:
applying, by the device, a weighting to the entries in the feature vectors to emphasize transitions of interest.

6. The method as in claim 1 , wherein using the transition pattern to effect a configuration change in the network comprises:
providing, by the device, an indication of the transition pattern to a machine learning-based anomaly detector.

7. An apparatus comprising:
one or more network interfaces to communicate with a network;
a processor coupled to the one or more network interfaces and configured to execute one or more processes; and
a memory configured to store a process that is executable by the processor, the process when executed configured to:
receive data regarding usage of access points in a network by a plurality of clients in the network;
maintain an access point graph that represents the access points in the network as vertices of the access point graph;
generate, for each of the plurality of clients, client trajectories as trajectory subgraphs of the access point graph, wherein a particular client trajectory for a particular client is indicative of transitions between access points in the network performed by the particular client, and further wherein an end of the particular client trajectory corresponds to an access point transition performed by the particular client for which a subsequent access point transition performed by the particular client is not observed within a predefined amount of time;
identify a transition pattern from the client trajectories by deconstructing the trajectory subgraphs; and
provide an indication of the transition pattern to a user interface.

8. The apparatus as in claim 7 , wherein the process when executed further comprises:
using the transition pattern to effect a configuration change in the network.

9. The apparatus as in claim 7 , wherein the apparatus identifies the transition pattern from the client trajectories by deconstructing the trajectory subgraphs by:
performing frequent subgraph mining on the trajectory subgraphs, to identify the transition pattern.

10. The apparatus as in claim 7 , wherein the apparatus identifies the transition pattern from the client trajectories by:
representing edges of the trajectory subgraphs as entries in feature vectors for the client trajectories; and
applying dictionary learning to the entries in the feature vectors for the client trajectories, to identify the transition pattern.

11. The apparatus as in claim 10 , wherein the process when executed further comprises:
applying a weighting to the entries in the feature vectors to emphasize transitions of interest.

12. The apparatus as in claim 7 , wherein the apparatus uses the transition pattern to effect a configuration change in the network by:
providing an indication of the transition pattern to a machine learning-based anomaly detector.

13. A tangible, non-transitory, computer-readable medium having software encoded thereon, the software when executed by a device configured to cause the device to perform a process comprising:
receiving, at a device, data regarding usage of access points in a network by a plurality of clients in the network;
maintaining, by the device, an access point graph that represents the access points in the network as vertices of the access point graph;
generating, by the device and for each of the plurality of clients, client trajectories as trajectory subgraphs of the access point graph, wherein a particular client trajectory for a particular client is indicative of transitions between access points in the network performed by the particular client, and further wherein an end of the particular client trajectory corresponds to an access point transition performed by the particular client for which a subsequent access point transition performed by the particular client is not observed within a predefined amount of time;
identifying, by the device, a transition pattern from the client trajectories by deconstructing the trajectory subgraphs; and
providing, by the device, an indication of the transition pattern to a user interface.

14. The tangible, non-transitory, computer-readable medium as in claim 13 , wherein the process when executed further comprises:
using, by the device, the transition pattern to effect a configuration change in the network.

15. The tangible, non-transitory, computer-readable medium as in claim 13 , wherein the device identifies the transition pattern from the client trajectories by deconstructing the trajectory subgraphs by:
performing frequent subgraph mining on the trajectory subgraphs, to identify the transition pattern.

16. The tangible, non-transitory, computer-readable medium as in claim 13 , wherein the device identifies the transition pattern from the client trajectories by:
representing edges of the trajectory subgraphs as entries in feature vectors for the client trajectories; and
applying dictionary learning to the entries in the feature vectors for the client trajectories, to identify the transition pattern.

17. The tangible, non-transitory, computer-readable medium as in claim 16 , wherein the process when executed further comprises:
applying, by the device, a weighting to the entries in the feature vectors to emphasize transitions of interest.

18. The tangible, non-transitory, computer-readable medium as in claim 13 , wherein the device uses the transition pattern to effect a configuration change in the network by:
providing an indication of the transition pattern to a machine learning-based anomaly detector.

Assignees

• Cisco Tech Inc

Inventors

• Savalle Pierre-André
• Mermoud Grégory
• Vasseur Jean-Philippe
• Cruz Mota Javier

Classifications

• H04W40/22

  using selective relaying for reaching a BTS [Base Transceiver Station] or an access point · CPC title

• H04W24/02 Primary

  Arrangements for optimising operational condition · CPC title

• H04L45/48

  Routing tree calculation · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04W64/003

  locating network equipment · CPC title