Abstract: Transmit power determination in a wireless access point (target AP) includes regularly updating receive signal strength indicators (RSSIs) associated with APs and clients in the neighborhood of the target AP. The transmit power of the target AP is recalibrated (adjusted) with each update. Recalibration continues so long as adjustments to the transmit power continue in the same direction (either increasing or decreasing) with each update. When an adjustment reversal occurs, recalibration terminates. In a variation, a final update on the transmit power, in the reversed direction, can be made prior to terminating the recalibration.

Abstract: Client devices in the same device group may use the same group-specific key to perform a key exchange operation with access point(s) to obtain network access. A network access management server may provide centralized management of different device groups each being associated with a different group-specific key during the life cycles of the device groups. An access point may communicate with the network access management server to obtain the group-specific key to assist in authenticating network access of a connecting client device.

Abstract: Client devices in the same device group may use the same group-specific key to perform a key exchange operation with access point(s) to obtain network access. A network access management server may provide centralized management of different device groups each being associated with a different group-specific key during the life cycles of the device groups. An access point may communicate with the network access management server to obtain the group-specific key to assist in authenticating network access of a connecting client device.

Abstract: A method of operating a wireless access point is provided. The method can include connecting with a host and determining whether the host has roamed from the wireless access point to an additional wireless access point. The method can further include activating a tunnel connecting the wireless access point to the additional wireless access point subsequent to determining that the host has roamed from the wireless access point to the additional wireless access point. The method can further include forwarding data packets from the wireless access point to the additional wireless access point via the tunnel. The tunnel can be temporarily created or established based on a configurable timer.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: A network device can be configured to access device group information organizing host devices into different user or user-specific key groups. The network device may perform data link layer (L2) forwarding based on the accessible device group information.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: A method and system for processing network traffic data units (NTDUs) is disclosed. The method includes establishing a virtual tunnel between a wireless access point (WAP) and a network device. A NTDU is received by the WAP from a client device, and the virtual tunnel is identified upon which to transmit the NTDU based on a header of the NTDU according to a policy. The policy maps a portion of the header to a plurality of available virtual tunnels. The NTDU is transmitted, via the virtual tunnel, to the network device.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: In some embodiments, a method assigns an assigned user location to a device identifier of a device of a user and receives a time series of measurements of a signal associated with the device identifier. Each measurement is between the device and a set of spatially disposed radio monitors. The method filters one or more measurements from the time series of measurements based on a characteristic to generate a set of measurements. The set of measurements is associated with the assigned user location. Different sets of measurements are associated with different assigned user locations for use in location tracking of a subject client.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: A method for processing network traffic data units (NTDUs). The method includes receiving, by a wireless access point (WAP), a NTDU from a client device. The method further includes identifying a virtual tunnel upon which to transmit the NTDU, where the virtual tunnel is associated with a network device and transmitting, via the virtual tunnel, the NTDU to the network device.

Abstract: In some embodiments, a method assigns an assigned user location to a device identifier of a device of a user and receives a time series of measurements of a signal associated with the device identifier. Each measurement is between the device and a set of spatially disposed radio monitors. The method filters one or more measurements from the time series of measurements based on a characteristic to generate a set of measurements. The set of measurements is associated with the assigned user location. Different sets of measurements are associated with different assigned user locations for use in location tracking of a subject client.

Abstract: In some embodiments, a method assigns an assigned user location to a device identifier of a device of a user and receives a time series of measurements of a signal associated with the device identifier. Each measurement is between the device and a set of spatially disposed radio monitors. The method filters one or more measurements from the time series of measurements based on a characteristic to generate a set of measurements. The set of measurements is associated with the assigned user location. Different sets of measurements are associated with different assigned user locations for use in location tracking of a subject client.

Abstract: A system and method is provided for detecting wireless access devices coupled to local area network of computers. The method includes coupling a sniffer device to a local area network. The method includes transferring one or more packets to be directed to a selected device over the local area network. The selected device is preferably coupled to the local area network. The method includes intercepting the one or more packets to be directed to the selected device at the sniffer device. Moreover, the method includes deriving information from the intercepted one or more packets using the sniffer device. The method can generate one or more marker packets in a selected format using the sniffer device. The marker packets are provided based upon at least a portion of the information derived from the intercepted packets.

Abstract: Method and system for tracking web presence of marketing topics. Input identifying a marketing topic is received. Benchmark is identified against which web presence of the marketing topic is to be compared. One or more web channels are identified for basis of comparison of the web presence of the marketing topic against web presence of the benchmark. A plurality of web pages containing information related to the marketing topic available on computers connected to the Internet are discovered and classified. A plurality of web pages containing information related to the benchmark available on computers connected to the Internet are discovered and classified. Comparison between the web pages related to the marketing topic and the web pages related to the benchmark is provided on the basis of distribution across the one or more web channels.

Abstract: A method for disrupting undesirable wireless communication in wireless network is provided. The method includes providing one or more sniffer devices to monitor wireless communications in a wireless network and detecting a wireless connection established between an access point device and a client device using the one or more sniffer devices. Preferably, the wireless connection is configured for not being disconnected upon receiving a spoofed disconnection request transmitted from a wireless device other than the access point device and the client device. The method also includes disrupting the wireless connection established between the access point device and the client device by transmitting one or more spoofed connection requests from at least one of the one or more sniffer devices.

Abstract: A method for protecting wireless communications from denial of service attacks is provided. The method comprises establishing a first wireless connection between an access point device and a client device. The method also comprises receiving at the access point device a request for establishing a second wireless connection between the access point device and the client device while a state of the first wireless connection being an established state at an access point device side endpoint. The method comprises verifying whether the first wireless connection is in the established state at the client device side endpoint.

Abstract: A system and method is provided for detecting wireless access devices coupled to local area network of computers. The method includes coupling a sniffer device to a local area network. The method includes transferring one or more packets to be directed to a selected device over the local area network. The selected device is preferably coupled to the local area network. The method includes intercepting the one or more packets to be directed to the selected device at the sniffer device. Moreover, the method includes deriving information from the intercepted one or more packets using the sniffer device. The method can generate one or more marker packets in a selected format using the sniffer device. The marker packets are provided based upon at least a portion of the information derived from the intercepted packets.

Abstract: A system and method is provided for detecting wireless access devices coupled to local area network of computers. The method includes coupling a sniffer device to a local area network. The method includes transferring one or more packets to be directed to a selected device over the local area network. The selected device is preferably coupled to the local area network. The method includes intercepting the one or more packets to be directed to the selected device at the sniffer device. Moreover, the method includes deriving information from the intercepted one or more packets using the sniffer device. The method can generate one or more marker packets in a selected format using the sniffer device. The marker packets are provided based upon at least a portion of the information derived from the intercepted packets.