发明名称 Apparatus and method for identifying rogue device
摘要 An apparatus and a method for identifying a rogue device having a media access control (MAC) address counterfeited/forged when a wireless intrusion prevention system controls an access to an access point (AP) and a wireless terminal which are not applied are disclosed. The apparatus includes: a sensor unit configured to collect MAC addresses, RSSI values, and RF feature values based on RF signals of wireless terminals; an RF feature database configured to store the collected MAC addresses, RSSI values, and RF feature values; and a terminal identification unit configured to identify whether a MAC of any one of the wireless terminals is forged by comparing information of the RF feature database with the RSSI value and the RF feature value of any one of the wireless terminals according to a MAC verification request of any one of the wireless terminals from the sensor unit.
申请公布号 US9420469(B2) 申请公布日期 2016.08.16
申请号 US201414540384 申请日期 2014.11.13
申请人 ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE 发明人 Kwon Hyeok-Chan;An Gae-Il;Lee Sok-Joon;Moon Jong-Sik;Chung Do-Young;Kim Sin-Hyo
分类号 H04W12/08;H04W12/12;H04W88/08 主分类号 H04W12/08
代理机构 Staas & Halsey LLP 代理人 Staas & Halsey LLP
主权项 1. An apparatus for identifying a rogue device, the apparatus comprising: a sensor configured to collect media access control (MAC) addresses, received signal strength indicator (RSSI) values, and radiofrequency (RF) feature values based on RF signals of wireless terminals; an RF feature database configured to store the collected MAC addresses, RSSI values, and RF feature values; and a terminal identifier configured to identify whether a MAC of any one of the wireless terminals is forged by comparing information of the RF feature database with the RSSI value and the RF feature value of any one of the wireless terminals according to a MAC verification request of any one of the wireless terminals from the sensor, wherein the RF feature value includes at least one of error vector magnitude (EVM), in phase/quadrature (I/Q) offset, frequency offset, and sync correlation, wherein the wireless terminal is configured of at least one movable user terminal, the sensor is registered with the MAC addresses of the movable wireless terminals, registered with positional information for each measurement position of the wireless terminals, and extracts and collects the RSSI values and the RF feature values within the RF signals from the wireless terminals at each measurement position, prior to requesting the MAC verification, and wherein the terminal identifier selects an EVM value having the highest possibility value based on the RSSI value and the EVM value for the MAC address of any one of the wireless terminals within the RF feature database by receiving the MAC verification request and identifies whether the MAC of any one of the wireless terminals is forged by comparing the selected EVM value with the EVM value within the RF feature value from the sensor.
地址 Daejeon KR