Abstract: Network devices are steered to preferred access points using a probability function. A probe request for connection is received from a network device. The probe request can be from a network device attempting to use a wireless network (e.g., a IEEE 802.11-type network or other suitable type of network). A probability function that defines a likelihood of granting the network device a connection is used to determine whether to accept or deny the response. The probe response is then sent to the network device.

Abstract: A controller directing access points to default to a virtual cell service mode which allows seamless mobility for stations in motion around a wireless network is disclosed. Responsive to identifying a first station, the controller logic may dictate tighter controls for the first station by selecting a virtual port service mode. Some embodiments can also select a native cell service mode for devices due to a connection history of the station or a MAC OUI that is incompatible with virtual cell service mode. An initial service mode can be changed due to a condition. Also, the controller provides multiple BSSIDs to each access point.

Abstract: An energy management system within a building obtains energy usage data over several cycles to determine a minimum feasible load. The minimum feasible load corresponds to operational conditions of the building, such as occupied or unoccupied. The energy usage data is binned according to the operational condition under which it was obtained. A threshold based on the minimum feasible load is used to monitor energy usage within the building and to identify anomalies in energy demand for possible action.

Abstract: A spoofed management frame is sent to an unauthorized access point (AP) on behalf of a station from an authorized AP, using a media access control (MAC) address of the station. The spoofed frame triggers a security association (SA) query from an unauthorized AP to reestablish valid communications. An acknowledgment (ACK) frame sent from the client to the unauthorized AP responsive to the SA query request is detected by the AP. A probe response is sent to the client. The probe response includes a channel switching element. The channel switching prevents the client from completing the SA process before a time out.

Abstract: An energy management system within a building obtains energy usage data over several cycles to determine a minimum feasible load. The minimum feasible load corresponds to operational conditions of the building, such as occupied or unoccupied. The energy usage data is binned according to the operational condition under which it was obtained. A threshold based on the minimum feasible load is used to monitor energy usage within the building and to identify anomalies in energy demand for possible action.

Abstract: A method wherein a message packet is received at a node in a 1st wireless communication system, wherein said 1st wireless communication system determines whether it is experiencing interference with a 2nd wireless communication system, and wherein said 1st wireless communication system takes action to reduce said interference. Reducing said interference might include reduction in signal strength, change in message coding, and other actions, in response to a set of selected interference thresholds. Different protocol effects might be changed in response to one or more said thresholds, with the effect that distinct wireless communication systems may operate in relatively close proximity with a minimum of interference.

Abstract: Traffic broadcast to a VLAN is restricted. To do so, a plurality of stations are associated with a BSSID (basic service set identifier). A first VLAN is configured by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key. One or more frames addressed to the first VLAN are received. The one or more frames are encrypted with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames. The one or more encrypted VLAN frames are broadcast to the plurality of stations associated with the BSSID.

Abstract: Network devices are steered to preferred access points using a probability function. A probe request for connection is received from a network device. The probe request can be from a network device attempting to use a wireless network (e.g., a IEEE 802.11-type network or other suitable type of network). A probability function that defines a likelihood of granting the network device a connection is used to determine whether to accept or deny the response. The probe response is then sent to the network device.

Abstract: An 802.11-compliant device for high throughput is disclosed. A plurality of TCP packets received in a buffer for transmission are stored. The plurality of TCP packets can be aggregated as A-MSDU sub-frames to form a A-MSDU frame in accordance with an IEEE 802.11 standard. Additionally, a plurality of A-MSDU frames can be aggregated as A-MPDU sub-frames to form a A-MPDU frame. The A-MPDU frame is compliant with a number of allowable sub-frames and a maximum size in accordance with an 802.11 standard. The A-MPDU frame is sent for transmission as an IEEE 802.11 packet.

Abstract: A system and method enable the transmission of messages between a source device and a wireless station. A first message is received at an access point from the source device. The access point transmits the first message to the wireless station and stores a copy of the first message in a memory. The access point receives an acknowledgement message from the wireless station and transmits a proxy acknowledgement message to the source device. The access point transmits a control message to the source device to limit the number or size of additional messages sent from the source device based on a number or size of messages currently stored in the memory and a maximum number or size of messages that can be stored in the memory.

Abstract: Techniques which prevent rogue devices from continued access to a wireless communication system. A control element directs access points as to which mobile stations to service. Each access point maintains a record of the mobile stations it is servicing. At the direction of the control element, one or more access points send ACK (acknowledgement) messages when hearing messages from a rogue device. When the rogue device sends a message, it expects an ACK message in response, but those additional ACK messages interfere with the responsive ACK message, causing the rogue device to never hear the responsive ACK message. The rogue device assumes its message was not received, so it retries sending of that message. When the rogue device retries sending of its message, the responsive ACK message is similarly interfered with, until the rogue device concludes that its connection has been lost.

Abstract: Uplink medium access control on per-wireless device level. An access point sends a beacon frame to a wireless device. The beacon frame includes a BSSID that is unique to the wireless device. The beacon frame also includes embedded uplink configurations specifying uplink medium access for the wireless device. In one embodiment, a controller recognizes a device or user associated with the device, and sends corresponding uplink configurations for embedding in a subsequent beacon frame.

Abstract: ACK messages by access points are suppressed when those access points receive messages from wireless stations for which those access points should not respond. This might occur in wireless communication systems based upon 802.11 protocols in which seamless mobility is desired, with a system controller that assigns wireless stations to specific access points. The access point examines an incoming message from a wireless device to decide whether or not to suppress a responsive ACK message to that wireless device. An access point may suppress an ACK message by suppressing the generation of the ACK, or by suppressing the transmission of a generated ACK. Mechanisms for suppressing an ACK message include setting the ACK transmission to a relatively unpowered transmitting antenna; interrupting a PHY-layer element during receipt of an incoming frame; and limiting entries in a key cache table to suppress ACK messages in response to encrypted incoming frames.

Abstract: A set of techniques includes devices, methods, and user interfaces, capable of conducting proactive automated tests of a wireless system, and capable of operating while the wireless system is conducting its normal operations. A diagnostic device not controlled by the wireless system controls drivers and clients in that wireless system's access points, with the effect that the diagnostic device can inject message traffic into the wireless system while simulating clients of that system. The wireless system responds to that traffic and those simulated clients as if real clients were generating substantially real traffic for the system to handle. The diagnostic device can initiate messages from within that wireless system, can force those messages to traverse selected trajectories in that system, and can measure aspects of that system in response to those messages. Trajectories might include specific wireless devices, specific wireless parameters, and specific physical paths.

Abstract: An energy management system within a building obtains energy usage data over several cycles to determine a minimum feasible load. The minimum feasible load corresponds to operational conditions of the building, such as occupied or unoccupied. The energy usage data is binned according to the operational condition under which it was obtained. A threshold based on the minimum feasible load is used to monitor energy usage within the building and to identify anomalies in energy demand for possible action.