DEAUTHENTICATING AND DISASSOCIATING UNAUTHORIZED ACCESS POINTS WITH SPOOFED MANAGEMENT FRAMES

摘要

A spoofed management frame is sent to an unauthorized access point (AP) on behalf of a station from an authorized AP, using a media access control (MAC) address of the station. The spoofed frame triggers a security association (SA) query from an unauthorized AP to reestablish valid communications. An acknowledgment (ACK) frame sent from the client to the unauthorized AP responsive to the SA query request is detected by the AP. A probe response is sent to the client. The probe response includes a channel switching element. The channel switching prevents the client from completing the SA process before a time out.

主权项

1. A computer-implemented method in an access point (AP) of a wireless network, the method comprising:
sending an association request on behalf of a station to an authorized AP using a media access control (MAC) address of the station as a source address, wherein the request triggers an security association (SA) query from an unauthorized AP; detecting an acknowledgment (ACK) frame sent from the station to the unauthorized AP responsive to the SA query request; and responsive to the ACK frame detection, sending a probe response to the station, wherein the probe response includes a channel switching element, said channel switching element preventing the station from completing the SA process with the unauthorized AP before a time out.