System and method for cloning a Wi-Fi access point

Patent metadata

Field	Value
Publication number	US-9491623-B2
Application number	US-201514712414-A
Country	US
Kind code	B2
Filing date	May 14, 2015
Priority date	Sep 30, 2011
Publication date	Nov 8, 2016
Grant date	Nov 8, 2016

Abstract

Systems and methods for cloning a Wi-Fi access point. A determination is made by a network monitoring device to transition communications between a Wi-Fi device and a first access point (AP) to a second AP. The SSID and the security configuration information, and, optionally, network address translation (NAT) information of the first access point are acquired and provided to a second AP. The second AP instantiates the SSID and the security configuration information and, optionally, the NAT information. The networking monitoring device directs the first AP to cease using the SSID and the security configuration information and, optionally, the NAT information in response to receipt of confirmation that the second AP has instantiated the SSID and the security configuration information and, optionally, the NAT information of the first AP.

First claim

What is claimed is:

1. A virtual access point (VAP), comprising:
a processor configured with processor-executable instructions to perform operations comprising:
receiving a probe message from a Wi-Fi device, wherein the probe message comprises an SSID and a MAC address of the Wi-Fi device;
determining whether the Wi-Fi device is known to the VAP from the SSID and the MAC address of the Wi-Fi device;
establishing a communication link to a network monitoring device in response to determining that the Wi-Fi device is known to the VAP;
determining via the communication link whether the Wi-Fi device is associated with a second VAP using the SSID, the MAC address of the Wi-Fi device and a security configuration of the second VAP;
providing metrics of the VAP to the network monitoring device when the Wi-Fi device is associated with the second VAP in response to determining that the Wi-Fi device is associated with the second VAP;
receiving from the network monitoring device security configuration information of the second VAP via the communication link;
instantiating the SSID and the security configuration information of the second VAP; and
establishing communication with the Wi-Fi device using the using the SSID, the MAC address of the Wi-Fi device, and the security configuration information of the second VAP.

2. The VAP of claim 1 , wherein the processor is configured with processor-executable instructions to perform operations such that establishing a communication link to a network monitoring device in response to determining that the Wi-Fi device is known to the VAP comprises establishing a virtual private network (VPN) tunnel to a home gateway of the Wi-Fi device.

3. The VAP of claim 1 , wherein the processor is configured with processor-executable instructions to perform operations further comprising:
entering an idle ready state in response to determining that the Wi-Fi device is associated with the second VAP.

4. The VAP of claim 3 , wherein the processor is configured with processor-executable instructions to perform operations such that receiving from the network monitoring device security configuration information of the second VAP via the communication link comprises receiving an instruction from the network monitoring device to instantiate the SSID and the security configuration information of the second VAP.

5. The VAP of claim 4 , wherein the processor is configured with processor-executable instructions to perform operations such that instantiating the SSID and the security configuration information of the second VAP comprises instantiating the SSID and the security configuration information of the second VAP in response to the instruction from the network monitoring device.

6. The VAP of claim 1 , wherein the processor is configured with processor-executable instructions to perform operations such that instantiating the SSID and the security configuration information of the second VAP comprises instantiating one or more of a MAC address of the second VAP and a state of the second VAP.

7. The VAP of claim 1 , wherein the processor is configured with processor-executable instructions to perform operations such that instantiating the SSID and the security configuration information of the second VAP comprises communicating to the network monitoring device that the SSID and the security configuration information of the second VAP are instantiated at the VAP.

8. A method for transitioning communication of a Wi-Fi device in a network, comprising
receiving, at a first virtual access point (VAP), a probe message from a Wi-Fi device, wherein the probe message comprises an SSID and a MAC address of the Wi-Fi device;
determining, at the first VAP, whether the Wi-Fi device is known to the first VAP from the SSID and the MAC address of the Wi-Fi device;
establishing a communication link between the first VAP and a network monitoring device in response to determining that the Wi-Fi device is known to the first VAP;
determining via the communication link whether the Wi-Fi device is associated with a second VAP using the SSID, the MAC address of the Wi-Fi device and a security configuration of the second VAP;
providing metrics of the first VAP to the network monitoring device when the Wi-Fi device is associated with the second VAP in response to determining that the Wi-Fi device is associated with the second VAP;
receiving, at the first VAP from the network monitoring device, security configuration information of the second VAP via the communication link;
instantiating, at the first VAP, the SSID and the security configuration information of the second VAP; and
establishing communication between the first VAP and the Wi-Fi device using the using the SSID, the MAC address of the Wi-Fi device, and the security configuration information of the second VAP.

9. The method of claim 8 , wherein establishing a communication link between the first VAP and a network monitoring device in response to determining that the Wi-Fi device is known to the first VAP comprises establishing a virtual private network (VPN) tunnel to a home gateway of the Wi-Fi device.

10. The method of claim 8 , further comprising:
entering an idle ready state in response to determining that the Wi-Fi device is associated with the second VAP.

11. The method of claim 10 , wherein receiving, at the first VAP from the network monitoring device, security configuration information of the second VAP via the communication link comprises receiving, at the first VAP from the network monitoring device, an instruction to instantiate the SSID and the security configuration information of the second VAP.

12. The method of claim 11 , wherein instantiating, at the first VAP, the SSID and the security configuration information of the second VAP comprises instantiating, at the first VAP, the SSID and the security configuration information of the second VAP in response to the instruction from the network monitoring device.

13. The method of claim 8 , wherein instantiating, at the first VAP, the SSID and the security configuration information of the second VAP comprises instantiating, at the first VAP, one or more of a MAC address of the second VAP and a state of the second VAP.

14. The method of claim 8 , wherein instantiating, at the first VAP, the SSID and the security configuration information of the second VAP comprises communicating to the network monitoring device that the SSID and the security configuration information of the second VAP are instantiated at the first VAP.

Assignees

• Time Warner Cable Entpr Llc

Inventors

• Filippi Geoff
• Chen John Anthony

Classifications

• H04L63/0272 Primary

  Virtual private networks · CPC title

• H04W12/08

  Access security · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04W12/06 Primary

  Authentication · CPC title