Traffic and user aware physical layer shielding for secure teleworker using reconfigurable intelligent surface device

Patent metadata

Field	Value
Publication number	US-12469967-B2
Application number	US-202217678154-A
Country	US
Kind code	B2
Filing date	Feb 23, 2022
Priority date	Feb 23, 2022
Publication date	Nov 11, 2025
Grant date	Nov 11, 2025

Abstract

A system and methods by which a reconfigurable intelligent surface device is dynamically configured to control the reflection of transmissions made between an access point and one or more client devices so as to protect the transmissions from being properly received by an unauthorized device. These methods may be used to maintain data confidentiality, particularly for remote workers. The positions of the access point and client devices are used to configure the reconfigurable intelligent surface device to reflect the transmissions inward and avoid/minimize leakage outside a physical space.

First claim

What is claimed is:

1 . A system comprising:
at least one wireless access point configured to serve at least one wireless client device in a wireless network; a reconfigurable intelligent surface device configured to reflect transmissions, wherein the reconfigurable intelligent surface device comprises an array of sub-wavelength electromagnetic energy reflecting elements whose reflectivity characteristics are controlled by changing an impedance; and a controller that configures the reconfigurable intelligent surface device to reflect a transmission, made by the at least one wireless access point or by the at least one wireless client device, towards a first location, wherein the controller dynamically computes coefficients used to control reflection, refraction and consumption of transmissions by the reconfigurable intelligent surface device, based on a location of the at least one wireless access point and a location of the at least one wireless client device.

2 . The system of claim 1 , wherein the controller further configures the reconfigurable intelligent surface device to reflect the transmission away from one or more locations within and/or outside a physical space where it is desired to prevent reception of the transmission.

3 . The system of claim 1 , wherein the at least one wireless access point is configured to initiate a request to the controller to configure the reconfigurable intelligent surface device based at least on the location of the at least one wireless client device.

4 . The system of claim 3 , wherein the at least one wireless access point is programmed with one or more events to trigger the request to protect transmissions, the one or more events including: time of day, a particular traffic flow, a particular communication session, and a particular transaction.

5 . The system of claim 3 , wherein the at least one wireless access point includes in the request, information indicating a location of the at least one wireless access point.

6 . A system comprising:
at least one wireless access point configured to serve at least one wireless client device in a wireless network; a reconfigurable intelligent surface device configured to reflect transmissions; and a controller that configures the reconfigurable intelligent surface device to reflect a transmission, made by the at least one wireless access point or by the at least one wireless client device, towards a first location, wherein the at least one wireless access point includes a plurality of antennas, and wherein the at least one wireless access point uses at least a first antenna of the plurality of antennas to transmit a nulling signal towards a second location and uses at least a second antenna of the plurality of antennas to send a transmission to the reconfigurable intelligent surface device for reflection towards the first location.

7 . The system of claim 6 , wherein the controller dynamically computes coefficients used to control reflection, refraction and consumption of transmissions by the reconfigurable intelligent surface device, based on a location of the at least one wireless access point and a location of the at least one wireless client device.

8 . The system of claim 7 , wherein the controller configures the reconfigurable intelligent surface device based at least on the location of the at least one wireless client device based on a request received from the at least one wireless access point.

9 . The system of claim 8 , wherein the at least one wireless access point is programmed with one or more events to trigger the request to protect transmissions, the one or more events including: time of day, a particular traffic flow, a particular communication session, and a particular transaction.

10 . A system comprising:
at least one wireless access point configured to serve at least one wireless client device in a wireless network; a reconfigurable intelligent surface device configured to reflect transmissions; a controller that configures the reconfigurable intelligent surface device to reflect a transmission, made by the at least one wireless access point or by the at least one wireless client device, towards a first location; and a wireless transceiver coupled to the reconfigurable intelligent surface device, wherein the wireless transceiver is configured to detect transmissions by the at least one wireless access point and the reconfigurable intelligent surface device is configured to coordinate timing of a change of reflectivity characteristics with respect to a particular part of the transmission between the at least one wireless access point and the at least one wireless client device.

11 . The system of claim 10 , wherein the particular part is a midamble of a data portion of the transmission.

12 . The system of claim 11 , wherein the transmission is an uplink transmission from the at least one wireless client device to the at least one wireless access point or a downlink transmission from the at least one wireless access point to the at least one wireless client device.

13 . A method comprising:
serving, with a wireless access point, traffic in a wireless network with at least one wireless client device; adjusting reflectivity characteristics of a reconfigurable intelligent surface device to reflect a transmission made by the wireless access point or by the at least one wireless client device towards a first location; and coordinating timing of a change of reflectivity characteristics of the reconfigurable intelligent surface device with respect to a particular part of the transmission between the wireless access point and the at least one wireless client device.

14 . The method of claim 13 , wherein adjusting comprises configuring the reconfigurable intelligent surface device to reflect the transmission away from one or more locations within and/or outside a physical space where it is desired to prevent reception of the transmission.

15 . The method of claim 13 , wherein adjusting is based on one or more events including: time of day, a particular traffic flow, a particular communication session, and a particular transaction.

16 . The method of claim 13 , wherein the particular part is a midamble of a data portion of the transmission, and wherein the transmission is an uplink transmission from the at least one wireless client device to the wireless access point or a downlink transmission from the wireless access point to the at least one wireless client device.

17 . An apparatus comprising:
a network interface that enables network communications including communication with a wireless access point that serves traffic in a wireless network with at least one wireless client device; and a processor coupled to the network interface, wherein the processor is configured to generate one or more controls provided to a reconfigurable intelligent surface device cause the reconfigurable intelligent surface device to adjust reflectivity characteristics of a transmission made by the wireless access point or by the at least one wireless client device towards a first location, wherein the processor is configured to coordinate timing of a change of reflectivity characteristics of the reconfigurable intelligent surface device with respect to a particular part of the transmission between the wireless access point and the at least one wireless client device.

18 . The apparatus of claim 17 , wherein the processor is configured to generate the one or more controls to cause the reconfigurable intelligent surface device to reflect the transmi

Assignees

• Cisco Tech Inc

Inventors

• Swartz John Matthew
• Nainar Nagendra Kumar
• Pignataro Carlos M
• Silverman Matthew Aaron
• Alizadeh Ardalan

Classifications

• H04W12/02 Primary

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04B7/043

  using best eigenmode, e.g. beam forming or beam steering · CPC title

• H01Q15/0086

  said selective devices having materials with a synthesized negative refractive index, e.g. metamaterials or left-handed materials · CPC title

• H04B7/04013

  Intelligent reflective surfaces · CPC title

• H01Q15/148

  with means for varying the reflecting properties (H01Q15/147 takes precedence) · CPC title