Abstract: A spoofed management frame is sent to an unauthorized access point (AP) on behalf of a station from an authorized AP, using a media access control (MAC) address of the station. The spoofed frame triggers a security association (SA) query from an unauthorized AP to reestablish valid communications. An acknowledgment (ACK) frame sent from the client to the unauthorized AP responsive to the SA query request is detected by the AP. A probe response is sent to the client. The probe response includes a channel switching element. The channel switching prevents the client from completing the SA process before a time out.

Abstract: An access point associated on Wi-Fi portion of the communication network selectively groups stations according to a mobility profile. The mobility profile includes factors that characterize at least an amount of movement and current location for a station. Each station is assigned to a beamforming group of similar mobility profiles. A type of beamforming transmission is selected for each beamforming group based on mobility profiles of associated stations. The type of beamforming transmissions including at least MU-MIMO and SU-MIMO. Data is then transmitted to the stations of each beamforming group according to the selected type of beamforming transmissions. A Wi-Fi controller, having a network-wide view of conditions and being able to collect historical information about stations during connections to other access points, is able to provide data unique data to group selections.

Abstract: Wi-Fi services multicast to a subnet in a software-defined network (SDN) are extended. An SDN controller centrally monitors a data plane of a Wi-Fi network. Advertisements for services within a first subnet by an advertising station are forwarded to the SDN controller. Parameters of the service of the advertising station are extracted for storage by performing deep packet inspection on the one or more packets. Queries for services within a second subnet by a querying station are also forwarded to the SDN controller. Parameters of the service of the querying station are extracted for storage by performing deep packet inspection on the one or more packets. The query for service to the advertisement matches responsive to the advertisement parameters compared to the query parameters. Responsive to matching, a set of connection parameters necessary for the querying station at the second subnet to connect to the advertising station at the first subnet is sent.

Abstract: Wi-Fi flows are intelligently bridged in a software-defined network (SDN) controller of a wireless communication network that centrally coordinates data plane behavior. A default mode tunnels packets received at an access point to the SDN controller for layer 2 routing decisions. A bridging policy concerning bridging of specific types of traffic flows for the wireless communication network is received at the SDN. Data plane traffic flow for each of a plurality of access points distributed around the wireless communication network is centrally monitored. New data streams tunneled to the SDN controller are matched to bridging policies with deep packet inspection. Responsive to matching, the tunnel mode is converted to a bridge mode by sending a rule concerning the new data stream to the access point. As a result, subsequent packets of the new data stream are transferred at the access point without tunneling additional packets to the SDN controller).

Abstract: Wi-Fi services multicast to a subnet in a software-defined network (SDN) are extended. An SDN controller centrally monitors a data plane of a Wi-Fi network. Advertisements for services within a first subnet by an advertising station are forwarded to the SDN controller. Parameters of the service of the advertising station are extracted for storage by performing deep packet inspection on the one or more packets. Queries for services within a second subnet by a querying station are also forwarded to the SDN controller. Parameters of the service of the querying station are extracted for storage by performing deep packet inspection on the one or more packets. The query for service to the advertisement matches responsive to the advertisement parameters compared to the query parameters. Responsive to matching, a set of connection parameters necessary for the querying station at the second subnet to connect to the advertising station at the first subnet is sent.

Abstract: The present description provides methods, computer program products, and systems for saving power in Wi-Fi devices utilizing Bluetooth. A Wi-Fi radio transitions to deep sleep mode from active mode while a Bluetooth radio remains active. An active Wi-Fi connection to the access point can be maintained by the station while in deep sleep mode as needed to prevent being disassociated. Responsive to the indication of data packets waiting at the access point, sent over the Bluetooth radio, the Wi-Fi radio at the station can be transitioned from the deep sleep mode to the active mode. A notification of active mode is sent to the access point currently associated with the Wi-Fi radio so that packets can be forwarded.

Abstract: An SDN controller to provision network resources at a data plane to keep progressive downloads of multimedia files proportional to encoding rates is disclosed. Packets from a new or unknown flow being downloaded at a default rate are forwarded from an access point, or other device, to an SDN controller for analysis. If a progressive download of a multimedia file (e.g., a video file) in progress is detected, an encoding rate of frames for the multimedia file is determined. A target download rate for the multimedia file at the access point is determined based on the encoding rate, in an embodiment. Other optional factors also take into account network-wide data plane information gathered by the SDN controller from various points on the network. Additionally, a playback history for a particular multimedia file can affect the target download rate, based on whether, for example, a file is likely to be quickly halted.

Abstract: Beacons (e.g., mBeacons or meruBeacons) to advertise presence of nearby objects to stations in a wireless communication network from an access point are provided. Location of a station connected to the access point is detected. One or more physical objects having a location proximate to the station are identified and can be indicated to a user. To do so, in an embodiment, responsive to the proximity of locations, a beacon having a BSSID corresponding to each of the one or more physical objects is generated. The BSSID can uniquely identify the one or more physical objects. The beacon is transmitted the station which can request additional information concerning the one or more physical objects. For example, an Amazon listing for a nearby retail item can be automatically displayed on a smartphone.

Abstract: The present description provides methods, computer program products, and systems for alternative network communication for access point troubleshooting and monitoring. When a station has difficulty initiating or maintaining a connection with an access point, or even when performance is suboptimal, alternative network communication is initiated. The issue can be handled by reporting to a troubled access point for self-correction, or by uploading interrogation commands or code for active correction externally by a station. Further actions can be taken, for example, when a station determines through alternative communication that a troubled access point itself has connection issues to a back end network, the station uses a different access point for reporting up to a network admin. Although Wi-Fi and Bluetooth are described herein, other combinations of wireless protocols are implementable.

Abstract: A wireless communication network is self-provisioned using coordination of data plane behavior to steer stations to preferred access points. To do so, a policy concerning traffic flow for the wireless communication network is received. Data plane traffic flow is monitored at each of the plurality of access points distributed around the wireless communication network. At some point, it may be determined the data plane traffic flow at a first access point from needs to be reduced based on the data plane traffic flow relative to the policy. In response, a station is steered to a preferred access point using OpenFlow rules to affect data plane routing decisions at the access point (e.g., drop, delay, or reprioritize packets).

Abstract: Interaction with network infrastructure devices using instant messenger applications is disclosed. A message is received on an instant messenger application executing on the network infrastructure device. The message is sent from an authorized party or instant messenger friend. The message is mapped to one or more commands recognized by an operating system of the network infrastructure. Commands are submitted on a command line interface. A response to the one or more commands from the network infrastructure device is received on the command line interface. The response is sent on the instant messenger to the authorized party.

Abstract: Spoof attacks on location based beacons are detected. A stream of beacons (e.g., iBeacons) comprising at least a unique source identifier is generated. The stream of beacons is broadcast over a wireless communication channel to mobile devices within range. A list of broadcasted beacons is stored in a table along with a time and location of broadcast. Subsequent to broadcasting, a stream of beacons is detected. The detected beacon stream comprises a unique source identifier along with a time and a location of broadcast. The unique source identifier, the time and the location of at least one beacon of the detected beacon stream can be compared to the unique source identifier, the time and the location of at least one beacon of the broadcast beacon stream. Responsive to a match between the unique source identifiers and a mismatch of at least one of the time and locations, it is determined that the broadcast beacon stream has been spoofed by the detected beacon stream.

Abstract: Per-station realm lists are dynamically generating per-station for hot spot connections to access points by roaming stations. A query for a list of realms is received from a roaming station when connecting to a hot spot. Using an MAC address or other station identity, a list of available realms narrowed to a subset of per-station realms sent to the station. Narrowing is performed on-the-fly with respect to at least one aspects. A last N realms are retrieved from a database record searched by MAC address. The list is further narrowed by removing realms that are inaccessible or otherwise recently shown to have bad link quality. Additional ranking factors can narrow or rearrange the realm list based on financial agreements, popularity, trends, and the like. A selection from the list of realms is received from the station. The access point then authenticates the station with the selected realm.

Abstract: A technique for emulating virtual port control of airtime fairness for wireless stations using per station Enhanced Distributed Channel Access (EDCA) parameters. Specific parameters are received for each of a plurality of stations connected to the access point. An EDCA field of a beacon that stores a general EDCA parameter is set to an empty state. The beacon is broadcast to a plurality stations on the wireless communication network and within range of an access point. The beacon comprises a BSSID (Basic Service Set Identifier) for use by the plurality of stations to connect with the access point for access to the wireless communication network. The beacon also comprises an empty EDCA field. In response to broadcasting the empty EDCA parameter, receiving a direct inquiry from each of the plurality of stations for the general EDCA parameter. Each of the plurality of stations is responded to with a direct communication of a specific parameter corresponding to each station.

Abstract: A system and method for optimizing voice communications in a wireless network including an AP having a message waiting time that provides proper QoS while losing minimal communication bandwidth. The QoS may be responsive to the amount of user traffic in both the AP and neighboring APs. The method may include setting parameters for each level of QoS in response to a measure of the degree of contention for that level of QoS, and in response to a measure of the degree of contention for those levels of QoS with higher priority, and setting waiting time parameters in response to a stochastic model of contention at each level of QoS. Operational parameters might include contention window time, AIFS time, and back-off value(s), and might be modified in response to message QoS.

Abstract: Using the feature named “KEY_SEARCH_AD1” in the Atheros 11n chipset, an access point can determine whether to send an ACK packet in response to a message packet in response to whether the BSSID present in the sender address is present in the keycache. The AP can maintain a list of about 128 arbitrarily selected BSSID's, to each of which it will respond with an ACK packet if it receives a message from a mobile station with that BSSID. (1) the number of mobile stations that can be assigned to that AP is relatively greater. (2) the selection of those BSSID's is no longer constrained by having to match the AP's BSSID using a mask. With selection of those BSSID's being no longer so constrained, it is easier to assign BSSID's to mobile stations while allowing those mobile stations to roam among multiple AP's.

Abstract: Deploying multiple access points on multiple wireless communication channels to optimize coverage area. Additional channels provide additional communication capability which multiple AP's, and their associated stations, can collectively use. An additional set of AP's can be disposed in the additional communication channel, with multiple communication channels possibly physically intersecting. The system control element collects information from devices in the wireless communication system, and automatically configures which AP is assigned to which communication channel. The system control element determines which AP's are servicing which physical locations, in response to feedback from AP's and stations in those locations. The system control element assigns, or re-assigns, AP's in each physical location, with the effect of optimizing coverage.

Abstract: An AP having a message waiting time that provides proper QoS while losing minimal communication bandwidth, setting parameters for each level of QoS in response to a measure of the degree of contention for that level of QoS, and in response to a measure of the degree of contention for those levels of QoS with higher priority, and setting waiting time parameters in response to a stochastic model of contention at each level of QoS. Changes in contention at each level of QoS affect the AP's waiting time parameters for that level of QoS and also for levels of QoS with lower priority. Operational parameters might include contention window time, AIFS time, and back-off value(s), and might be modified in response to message QoS.

Abstract: A system and method for providing a seamless transition between access points for mobile devices. The method comprises associating a unique identifier for a plurality of mobile stations with a unique identifier for a first network in an acknowledgment table, then, upon receiving a frame from a mobile station, acknowledging the reception of the frame if the frame includes the unique identifier for the mobile station and the unique identifier for the network. The transfer of operation between access points is effectuated through the use of control circuitry which transfers portions of the contents of the acknowledgement table between various access points. This has the effect that the mobile stations does not sense a change in access points and thus the roaming from a first access point to a second access point is seamless.

Abstract: One or more access points in a wireless communication system, wherein at least one of those access points includes a set of more than one antennae capable of concurrent communication, and at least one of those more than one antennae is isolated from a remainder of that set of antennae during concurrent communication. Isolation includes one or more of disposed a first antenna in a null region of a second antenna, disposing a first antenna to communicate polarized and substantially orthogonal to a second antenna, disposing a set of antennae to communicate at two or more carrier frequencies, wherein each first antenna adjacent to a second antenna operate at distinct such carrier frequencies, or disposing a set of antennae to communicate using two or more substantially distinct protocols, wherein substantially each first antenna adjacent to a second antenna operate at substantially distinct such protocols.