Abstract: A wireless network probe method intercepts a data packet sent from a certain station, which has established communication with an access point (AP) connected to a wireless network before a service set identifier (SSID) of the wireless network has been closed. The method further amends data in the data packet to generate two attacked data packets, transmits the two attacked data packets using a media control access (MAC) address of the certain station, to interrupt the communication between the AP and the certain station. Furthermore, the method intercepts a re-association data packet sent to the AP from the certain station, retrieves the SSID from the re-association data packet, and stores the SSID into a second station, so as to connect the second station to the wireless network.

Abstract: A location tracking method using a portable electronic device utilizes communication with a server through access points. The portable electronic device creates a database to restore information of the access points and scans the access points which can communicates and searches the information of the access points scanned from the database. The portable electronic device logs onto the access points and transmits transmitter packages including the access points scanned and scanning time of the access points to the server for tracking locations of the portable electronic device.

Abstract: A location tracking method using a portable electronic device utilizes communication with a server through access points. The portable electronic device creates a database to restore information of the access points and scans the access points which can communicates and searches the information of the access points scanned from the database. The portable electronic device logs onto the access points and transmits transmitter packages including the access points scanned and scanning time of the access points to the server for tracking locations of the portable electronic device.

Abstract: A mobile station (STA) communicates with a WLAN device over a communication system includes a storage system, at least one processor, a detection module, an address determination module, a transmission module, and a response module. The STA detects a MAC management protocol data unit (MMPDU) over the communication system, determines whether the MMPDU comprises a spurious data frame posing as the STA to the WLAN device, based at least partly on a comparison of a source address and a destination address of the MMPDU with network addresses of the STA and the WLAN device, respectively, transmits a request data frame having a highest priority in a current connection state to the WLAN device, and determines whether the WLAN device has been attacked based on whether a response data frame is received from the WLAN device.

Abstract: A digital camera device is located within a wireless local area network (WLAN) which includes a plurality of wireless stations and access points (APs). The digital camera device detects no AP and then detects one wireless station. The digital camera device transmits a disconnection management frame to the detected wireless station by way of pretending to be one of the APs communicating to the detected to the wireless station to notify the detected wireless station to disconnect from the one of the APs. The digital camera device receives a reconnection management frame transmitted by the wireless station to the AP, retrieves a service set identification (SSID) of the AP from the reconnection management frame, and obtains a geography tag according to the retrieved SSID.

Abstract: A wireless local area network (WLAN) device actively scans a first wireless channel, waits for a first scanning result of the first wireless channel for a first waiting time period, and transmits a first time extending frame to the first wireless channel to extend the first waiting time period. The WLAN device further actively scans a second wireless channel within the first waiting time period, waits for a second scanning result of the second wireless channel for a second waiting time period, and transmits a second time extending frame to the second wireless channel to extend the second waiting time period. The WLAN device receives the first scanning result from the first wireless channel, and then receives the second scanning result from the second wireless channel, after the WLAN device actively scans the first and second wireless channels.

Abstract: A wireless network probe method intercepts a data packet sent from a certain station, which has established communication with an access point (AP) connected to a wireless network before a service set identifier (SSID) of the wireless network has been closed. The method further amends data in the data packet to generate two attacked data packets, transmits the two attacked data packets using a media control access (MAC) address of the certain station, to interrupt the communication between the AP and the certain station. Furthermore, the method intercepts a re-association data packet sent to the AP from the certain station, retrieves the SSID from the re-association data packet, and stores the SSID into a second station, so as to connect the second station to the wireless network.

Abstract: A mobile station (200) communicating with an access point (100) includes an association module (202), a mode switching module (204), a verifying module (206), and a recording module (208). The association module associates with the access point via an original address and a virtual address. The mode switching module switches between an active mode and a power saving mode. The verifying module transmits a first test frame, then transmits a data acquiring frame to the access point to acquire the first test frame, presets a period of time for receiving the first test frame, and determines whether a time when the first test frame is received is after or before the preset period of time. The recording module records whether the access point supports Frame Exchange Sequence (FES) to switch between the active mode and the power saving mode according to a determined result of the verifying module.

Abstract: A mobile station scans a wireless channel that an access point uses to communicate with a third-party mobile station, receives a management frame from the access point in the wireless channel, and determines that the access point utilizes a close service set identifier (SSID) according to the management frame. The mobile station further imitates one of the access point and the third-party mobile station to transmit a disconnection frame to the other one of the access point and the third-party mobile station, so as to disconnect a communication between the access point and the third-party mobile station. The mobile station further intercepts a reconnection frame transmitted between the access point and the third-party mobile station, and extracts the closed SSID of the access point from the reconnection frame.

Abstract: A mobile station (STA) communicates with a WLAN device over a communication system includes a storage system, at least one processor, a detection module, an address determination module, a transmission module, and a response module. The STA detects a MAC management protocol data unit (MMPDU) over the communication system, determines whether the MMPDU comprises a spurious data frame posing as the STA to the WLAN device, based at least partly on a comparison of a source address and a destination address of the MMPDU with network addresses of the STA and the WLAN device, respectively, transmits a request data frame having a highest priority in a current connection state to the WLAN device, and determines whether the WLAN device has been attacked based on whether a response data frame is received from the WLAN device.

Abstract: A method for numbering a plurality of frames with sequence numbers is implemented in a wireless network device having a plurality of data units, and includes the steps of: providing receiver addresses of the data units; and numbering each data unit with a respective sequence number according to the receiver address of the data unit. A WLAN device employing the method is also disclosed for avoiding denial of service (DoS) attacks and man-in-the-middle attacks.

Abstract: A mobile station wirelessly communicates with an access point during an awake mode of the mobile station through a wireless network and avoids attacks from an attacking station. The mobile station includes a detecting module, an attack-proof module, and a data transmission module. The detecting mobile is configured for detecting a fake null frame from the wireless network during the awake mode. The fake null frame is for interrupting communication between the mobile station and the access point in order for the mobile station to enter a power saving mode. The attack-proof module is configured for transmitting an attack-proof frame to the access point so as to notify the access point that the mobile station has not entered into the power saving mode. The data transmission module is for transmitting data to the access point and receiving data from the access point. A method for avoiding attacks is also provided.

Abstract: A method for transmitting information of a mobile station through a wireless local area network (WLAN) is provided. The WLAN includes a plurality of access points and a plurality of mobile stations, and is coupled to a management server. One mobile station communicates with one of the access points by management frames, and the access point communicates with the management server by packets. The method includes the steps of: adding an information element (IE) for storing information of the mobile station to a management frame by the mobile station; transmitting the management frame with the IE from the mobile station to the access point; adding content of the IE to a packet by the access point; and transmitting the packet from the access point to the management server.

Abstract: A system for identifying an access point is provided, the system arranged in a mobile station associated with the access point. The system includes a detecting module, a controlling module, a determining module, and an identifying module. The detecting module detects a beacon from the access point. The controlling module controls a connection status between the mobile station and the access point. The determining module determines whether the number of the mobile stations associated with the access point varies with changes in the connection status. The identifying module identifies a status of the access point based on a determination result. A method for identifying an access point is also provided.

Abstract: A method for detecting attacks in a power save mode includes providing a mobile station and an access point; entering a power save mode by the mobile station; producing a dummy mobile station by the mobile station, and initiating the dummy mobile station to communicate with the access point; producing mock data and transmitting the mock data from the dummy mobile station to the mobile station via the access point; and determining whether the mock data is saved in the access point to detect whether there is an attack. A mobile station employing the method is also provided.

Abstract: A method for increasing security of plaintext authentication in a wireless local area network (WLAN) is provided. The method includes steps of: establishing a basic service set in the WLAN; establishing a blank learning table for saving identities of faked users; generating the identities of the faked users according to a random hexadecimal string to protect identities of true users; performing a faked extensible authentication protocol process according to the generated identities; determining whether the learning table should be updated; and updating the learning table if the learning table should be updated.

Abstract: A mobile station (200) communicating with an access point (100) includes an association module (202), a mode switching module (204), a verifying module (206), and a recording module (208). The association module associates with the access point via an original address and a virtual address. The mode switching module switches between an active mode and a power saving mode. The verifying module transmits a first test frame, then transmits a data acquiring frame to the access point to acquire the first test frame, presets a period of time for receiving the first test frame, and determines whether a time when the first test frame is received is after or before the preset period of time. The recording module records whether the access point supports Frame Exchange Sequence (FES) to switch between the active mode and the power saving mode according to a determined result of the verifying module.

Abstract: A method for numbering a plurality of frames with sequence numbers, implemented in a wireless network having a plurality of data units, includes steps of: providing receiver addresses and transmit rates of the data units; and numbering each data unit with a respective sequence number according to the receiver address and the transmit rate of the data unit. A WLAN (wireless local area network) device employing the method is also provided. When the WLAN device transmits data to a receiving device, the receiving device can employ the method to compute Frame Error Rates (FERs) of the WLAN device at different transmit rates.

Abstract: A method for detecting an association status between a client and a server is provided. The method includes receiving a management frame; determining a frame state according to the management frame; transmitting a class frame to the server according to the frame state, a class of the class frame being higher than that of a frame corresponding to the frame state; determining whether an expected frame is received; and determining that the server is disassociated with the client if the expected frame is received. A client employing the method is also provided.

Abstract: A power saving method applied in a wireless local area network (WLAN) includes an access point and at least one mobile station. The power saving method includes the following steps. The power saving method includes the following steps. One of the at least one mobile station enters an active mode, and sends a query frame to the access point. The access point sends an acknowledgement frame to the one of the at least one mobile station after receiving the query frame and begins timing via a timing module. The access point determines whether there is a data frame to be sent to the one of the at least one mobile station. The access point sends the data frame to the one of the at least one mobile station when the timing module times out if there is the data frame to be sent to the one of the at least one mobile station. The one of the at least one mobile station enters a power saving mode after receiving the data frame.