Determining a legitimate access point response

Patent metadata

Field	Value
Publication number	US-9628993-B2
Application number	US-201314900202-A
Country	US
Kind code	B2
Filing date	Jul 4, 2013
Priority date	Jul 4, 2013
Publication date	Apr 18, 2017
Grant date	Apr 18, 2017

Abstract

A first request is sent from a station to an access point. The station receives a first response from the access point that includes a first sequence number, and stores the first sequence number. The station sends a second request to the access point and sets a waiting period for receiving a response from the access point. The station receives a second response from the access point and a third response from a second access point during the waiting period. The second response includes a second sequence number and the third response includes a third sequence number. The station determines that the second response is a legitimate response by comparing the second and third sequence numbers to the first sequence number.

First claim

What is claimed is:

1. A method comprising:
sending a first request from a wireless station to a first wireless access point;
receiving, at the station, a first response from the first access point, wherein the first response includes a first sequence number;
storing the first sequence number at the station;
sending a second request from the station to the first access point and setting a waiting period for receiving a response from the first access point;
receiving a second response from the first access point and a third response from a second wireless access point during the waiting period, wherein the second response includes a second sequence number and wherein the third response includes a third sequence number;
determining that the second access point is a bogus access point if a distance between the third sequence number and the first sequence number is less than the distance between the second sequence number and the first sequence number.

2. The method of claim 1 , wherein the first request is a probe request, wherein the first response is a probe response, wherein the second request is a generic advertisement service (GAS) request, wherein the second response is a GAS response, and wherein the third response is a bogus GAS response from a bogus access point.

3. The method of claim 2 , wherein the probe request and the GAS request are sent while the station is in a non-associated state relative to the first access point.

4. The method of claim 2 , wherein the GAS request includes a request for network connectivity information for connecting the station to the second access point.

5. The method of claim 1 , wherein the first, second, and third sequence numbers are 12-bit numbers.

6. The method of claim 1 , wherein the first sequence number is x and the second sequence number is x+ε, wherein x and x+ε are integers chosen from 0 to 4095, and wherein ε is dependent upon the throughput of the second access point.

Assignees

• Hewlett Packard Development Co Lp
• Hewlett Packard Entpr Dev Lp

Inventors

• Liu Yongqiang
• Li Shijian
• Xie Jun Qing

Classifications

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L47/27

  Evaluation or update of window size, e.g. using information derived from acknowledged [ACK] packets · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L47/34

  ensuring sequence integrity, e.g. using sequence numbers · CPC title

• H04W12/12

  Detection or prevention of fraud · CPC title