Abstract: A spoofed management frame is sent to an unauthorized access point (AP) on behalf of a station from an authorized AP, using a media access control (MAC) address of the station. The spoofed frame triggers a security association (SA) query from an unauthorized AP to reestablish valid communications. An acknowledgment (ACK) frame sent from the client to the unauthorized AP responsive to the SA query request is detected by the AP. A probe response is sent to the client. The probe response includes a channel switching element. The channel switching prevents the client from completing the SA process before a time out.

Abstract: An access point associated on Wi-Fi portion of the communication network selectively groups stations according to a mobility profile. The mobility profile includes factors that characterize at least an amount of movement and current location for a station. Each station is assigned to a beamforming group of similar mobility profiles. A type of beamforming transmission is selected for each beamforming group based on mobility profiles of associated stations. The type of beamforming transmissions including at least MU-MIMO and SU-MIMO. Data is then transmitted to the stations of each beamforming group according to the selected type of beamforming transmissions. A Wi-Fi controller, having a network-wide view of conditions and being able to collect historical information about stations during connections to other access points, is able to provide data unique data to group selections.

Abstract: Wi-Fi flows are intelligently bridged in a software-defined network (SDN) controller of a wireless communication network that centrally coordinates data plane behavior. A default mode tunnels packets received at an access point to the SDN controller for layer 2 routing decisions. A bridging policy concerning bridging of specific types of traffic flows for the wireless communication network is received at the SDN. Data plane traffic flow for each of a plurality of access points distributed around the wireless communication network is centrally monitored. New data streams tunneled to the SDN controller are matched to bridging policies with deep packet inspection. Responsive to matching, the tunnel mode is converted to a bridge mode by sending a rule concerning the new data stream to the access point. As a result, subsequent packets of the new data stream are transferred at the access point without tunneling additional packets to the SDN controller).

Abstract: The present description provides methods, computer program products, and systems for saving power in Wi-Fi devices utilizing Bluetooth. A Wi-Fi radio transitions to deep sleep mode from active mode while a Bluetooth radio remains active. An active Wi-Fi connection to the access point can be maintained by the station while in deep sleep mode as needed to prevent being disassociated. Responsive to the indication of data packets waiting at the access point, sent over the Bluetooth radio, the Wi-Fi radio at the station can be transitioned from the deep sleep mode to the active mode. A notification of active mode is sent to the access point currently associated with the Wi-Fi radio so that packets can be forwarded.

Abstract: Spoof attacks on location based beacons are detected. A stream of beacons (e.g., iBeacons) comprising at least a unique source identifier is generated. The stream of beacons is broadcast over a wireless communication channel to mobile devices within range. A list of broadcasted beacons is stored in a table along with a time and location of broadcast. Subsequent to broadcasting, a stream of beacons is detected. The detected beacon stream comprises a unique source identifier along with a time and a location of broadcast. The unique source identifier, the time and the location of at least one beacon of the detected beacon stream can be compared to the unique source identifier, the time and the location of at least one beacon of the broadcast beacon stream. Responsive to a match between the unique source identifiers and a mismatch of at least one of the time and locations, it is determined that the broadcast beacon stream has been spoofed by the detected beacon stream.

Abstract: Interaction with network infrastructure devices using instant messenger applications is disclosed. A message is received on an instant messenger application executing on the network infrastructure device. The message is sent from an authorized party or instant messenger friend. The message is mapped to one or more commands recognized by an operating system of the network infrastructure. Commands are submitted on a command line interface. A response to the one or more commands from the network infrastructure device is received on the command line interface. The response is sent on the instant messenger to the authorized party.

Abstract: Per-station realm lists are dynamically generating per-station for hot spot connections to access points by roaming stations. A query for a list of realms is received from a roaming station when connecting to a hot spot. Using an MAC address or other station identity, a list of available realms narrowed to a subset of per-station realms sent to the station. Narrowing is performed on-the-fly with respect to at least one aspects. A last N realms are retrieved from a database record searched by MAC address. The list is further narrowed by removing realms that are inaccessible or otherwise recently shown to have bad link quality. Additional ranking factors can narrow or rearrange the realm list based on financial agreements, popularity, trends, and the like. A selection from the list of realms is received from the station. The access point then authenticates the station with the selected realm.

Abstract: A system and method for optimizing voice communications in a wireless network including an AP having a message waiting time that provides proper QoS while losing minimal communication bandwidth. The QoS may be responsive to the amount of user traffic in both the AP and neighboring APs. The method may include setting parameters for each level of QoS in response to a measure of the degree of contention for that level of QoS, and in response to a measure of the degree of contention for those levels of QoS with higher priority, and setting waiting time parameters in response to a stochastic model of contention at each level of QoS. Operational parameters might include contention window time, AIFS time, and back-off value(s), and might be modified in response to message QoS.

Abstract: Deploying multiple access points on multiple wireless communication channels to optimize coverage area. Additional channels provide additional communication capability which multiple AP's, and their associated stations, can collectively use. An additional set of AP's can be disposed in the additional communication channel, with multiple communication channels possibly physically intersecting. The system control element collects information from devices in the wireless communication system, and automatically configures which AP is assigned to which communication channel. The system control element determines which AP's are servicing which physical locations, in response to feedback from AP's and stations in those locations. The system control element assigns, or re-assigns, AP's in each physical location, with the effect of optimizing coverage.

Abstract: An AP having a message waiting time that provides proper QoS while losing minimal communication bandwidth, setting parameters for each level of QoS in response to a measure of the degree of contention for that level of QoS, and in response to a measure of the degree of contention for those levels of QoS with higher priority, and setting waiting time parameters in response to a stochastic model of contention at each level of QoS. Changes in contention at each level of QoS affect the AP's waiting time parameters for that level of QoS and also for levels of QoS with lower priority. Operational parameters might include contention window time, AIFS time, and back-off value(s), and might be modified in response to message QoS.

Abstract: A system and method for providing a seamless transition between access points for mobile devices. The method comprises associating a unique identifier for a plurality of mobile stations with a unique identifier for a first network in an acknowledgment table, then, upon receiving a frame from a mobile station, acknowledging the reception of the frame if the frame includes the unique identifier for the mobile station and the unique identifier for the network. The transfer of operation between access points is effectuated through the use of control circuitry which transfers portions of the contents of the acknowledgement table between various access points. This has the effect that the mobile stations does not sense a change in access points and thus the roaming from a first access point to a second access point is seamless.

Abstract: One or more access points in a wireless communication system, wherein at least one of those access points includes a set of more than one antennae capable of concurrent communication, and at least one of those more than one antennae is isolated from a remainder of that set of antennae during concurrent communication. Isolation includes one or more of disposed a first antenna in a null region of a second antenna, disposing a first antenna to communicate polarized and substantially orthogonal to a second antenna, disposing a set of antennae to communicate at two or more carrier frequencies, wherein each first antenna adjacent to a second antenna operate at distinct such carrier frequencies, or disposing a set of antennae to communicate using two or more substantially distinct protocols, wherein substantially each first antenna adjacent to a second antenna operate at substantially distinct such protocols.

Abstract: Network devices are steered to preferred access points using a probability function. A probe request for connection is received from a network device. The probe request can be from a network device attempting to use a wireless network (e.g., a IEEE 802.11-type network or other suitable type of network). A probability function that defines a likelihood of granting the network device a connection is used to determine whether to accept or deny the response. The probe response is then sent to the network device.

Abstract: A technique for providing per station control of multiple stations in a wireless network across multiple access points. A look-up table that assigns a station connected to the access point and at least one communication parameter to each of a plurality of persistent, uniquely-assigned BSSIDs (Basic Service Set Identifiers) is stored. An access point responds to messages addressed one of the plurality of persistent, uniquely-assigned BSSIDs and ignores messages addressed to other BSSIDs. Persistence of the BSSID allows the controller to maintain individual control over each station after moving to a second access point of the plurality of access points. A frame comprising the plurality of BSSIDs corresponding to each connected station aggregated into the frame is generated. The frame is transmitted to the plurality of stations.

Abstract: A controller directing access points to default to a virtual cell service mode which allows seamless mobility for stations in motion around a wireless network is disclosed. Responsive to identifying a first station, the controller logic may dictate tighter controls for the first station by selecting a virtual port service mode. Some embodiments can also select a native cell service mode for devices due to a connection history of the station or a MAC OUI that is incompatible with virtual cell service mode. An initial service mode can be changed due to a condition. Also, the controller provides multiple BSSIDs to each access point.

Abstract: A communication system detects particular application protocols in response to their message traffic patterns, which might be responsive to packet size, average packet rate, burstiness of packet transmissions, or other message pattern features. Selected message pattern features include average packet rate, maximum packet burst, maximum future accumulation, minimum packet size, and maximum packet size. The system maintains a counter of packet tokens, each arriving at a constant rate, and maintains a queue of real packets. Each real packet is released from the queue when there is a corresponding packet token also available for release. Packet tokens overfilling the counter, and real packets overfilling the queue, are discarded. Users might add or alter application protocol descriptions to account for profiles thereof.

Abstract: Systems and methods for implementing a differential signal to noise ratio (DSNR) based rate adaptation for wireless networks are disclosed. The described methods probabilistically adapt the rate of data transmission based on an assessment of the causes of data loss. The described methods include determining a DSNR for data transmission during a predetermined window of time and adapting the transmission rate in a probabilistic manner responsive to the differential SNR and a differential SNR threshold for the data transmission.

Abstract: A dual-band antenna including a ground plane, a first resonating plate that resonates in a first frequency band, a first shorting plate that shorts the first resonating plate to the ground plane, a second resonating plate that resonates in a second frequency band, with the second resonating plate raised above the first resonating plate with respect to the ground plane, and a second shorting plate that shorts the second resonating plate to the first resonating plate. Also, a dual-stack dual-band MIMO antenna comprising four dual-band antennas arranged in a square or rectangular pattern.

Abstract: An access point switches between an access point mode and a surveillance mode. In the access point mode, the access point provides network access for end stations using a BSSID (Basic Service Set Identifier) while in the access point mode. In surveillance mode, the access point scans one or more channels of the wireless network to identify one or more anomalous devices.

Abstract: A method wherein a message packet is received at a node in a 1st wireless communication system, wherein said 1st wireless communication system determines whether it is experiencing interference with a 2nd wireless communication system, and wherein said 1st wireless communication system takes action to reduce said interference. Reducing said interference might include reduction in signal strength, change in message coding, and other actions, in response to a set of selected interference thresholds. Different protocol effects might be changed in response to one or more said thresholds, with the effect that distinct wireless communication systems may operate in relatively close proximity with a minimum of interference.