Abstract: In one embodiment, a method for acquiring service provider information includes querying a wireless network for service provider information, receiving an advertisement response containing advertising service scheduling information, and configuring a power conservation mode responsive to the advertising service scheduling information.

Abstract: Method for detecting an attack on a broadcast key shared between an access point and its wireless clients. Upon detection of the attack, actions are implemented to react to the attack as defined in one or more security policies. Detection of the attack is achieved by examining both a link message integrity check and an infrastructure management frame protection (IMFP) message integrity check contained in a broadcast management frame.

Abstract: A congestion control system. In particular implementations, a method includes receiving packets into one or more queues and monitoring the one or more queues for congestion. The method also includes, if a number of packets in the one or more queues exceeds a first threshold, determining a congestion control mode. The method also includes generating a congestion control message indicating the congestion control mode and transmitting the congestion control message to one or more neighboring mesh nodes.

Abstract: Embodiments of the present invention include a method, an apparatus, and logic encoded in one or more computer-readable tangible medium to carry out a method. One method includes tagging packets and forwarding packets in a wireless mesh network using stored forwarding information for the tag, wherein the forwarding information is according to a centrally determined routing method and tag distribution method.

Abstract: Methods, apparatuses and systems directed to detecting address spoofing in wireless networks by, after receiving a wireless management frame, transmitting verification messages to determine whether a given wireless node (e.g., a wireless access point, or wireless client) has legitimately lost its connection state.

Abstract: A troubleshooting system. In particular implementations, a method includes collecting, from a first wireless network element, PEM state associated with a wireless client having a connection problem, and collecting log data associated with the wireless client from the first wireless network elements and one or more other wireless network elements. The method further includes correlating the PEM state and log data based on a network security protocol employed by the wireless client, where the network security protocol corresponds to an expected sequence of events. The correlating includes correlating events and messages collected based on the expected sequence of events, and comparing the correlated sequence of events to a data store of diagnostic information to identify one or more possible causes of the connection problem.

Abstract: A troubleshooting system. In particular implementations, a method includes receiving a request for troubleshooting, where the request comprises identifying information for a wireless client having a connection problem. The method further includes identifying network nodes that are sources of log data associated with connection activity of the wireless client, and invoking troubleshoot logging on one or more central controllers for the wireless client. The method further includes polling the identified network nodes for the log data, and identifying one or more potential causes of the connection problem based on correlating the data logs.

Abstract: Methods, apparatuses, and systems directed to a key distribution and caching mechanism that facilitates roaming in wireless networks. In one implementation, the present invention reduces the latency associated with handoffs by reducing the time required to set up encryption or other secure access mechanisms between access points and clients in the wireless network infrastructure. In one implementation, the present invention operates proactively to distribute authentication credential information to selected components of the wireless network infrastructure before a client roams to another access point.

Abstract: Method for detecting an attack on a broadcast key shared between an access point and its wireless clients. Upon detection of the attack, actions are implemented to react to the attack as defined in one or more security policies. Detection of the attack is achieved by examining both a link message integrity check and an infrastructure management frame protection (IMFP) message integrity check contained in a broadcast management frame.

Abstract: Methods, apparatuses, and systems directed to facilitating roaming and client handoffs in wireless networks. In one implementation, the present invention is directed to a coordination mechanism facilitating handoffs of wireless clients in a wireless network infrastructure. In one implementation, the coordination mechanism minimizes the use of group- or multi-casting to provide a scalable wireless network roaming infrastructure.

Abstract: In a fixed channel wireless network system with a limited number of channels, assignment of the fixed channels between remote client elements and access elements is made systematically according to a set of criteria accounting for network loading and interference, then channel assignments are dynamically updated according to a priority to maintain optimal network performance with changing conditions of load and interference. The channel utilization problem is address at a system level rather than at a local level by treating the system as a three dimensional color mapping problem. All noise is treated as having a source in virtual access elements with an appropriate performance metric. The performance metric is used to select a channel set that minimize chances of interference and maximize user performance. Specifically, there are several parameter matrices which are managed and updated by a central resource management element, namely signal strength between elements, interference, and load.

Abstract: Methods, apparatuses and systems facilitating containment of the effects of rogue or unauthorized access points on wireless computer network environments. Embodiments of the present invention support one to a plurality of rogue containment methodologies. A first rogue containment type involves identification of the physical connection of the rogue access point to the wired network infrastructure and, thus, allows for disabling of that physical connection to contain the rogue access point. Other rogue containment methods involve wireless techniques for containing the effect of rogue access points. As discussed below, the rogue containment functionality described herein can be applied to a wide variety of wireless network system architectures.

Abstract: Methods, apparatuses, and systems directed to facilitating the application of pre-allocation policies in a wireless network environment. According to one implementation of the present invention, a central controller, or other control point in a wireless network infrastructure, applies one or more policies that limit the number of resource pre-allocations a given wireless client may establish with one or more wireless access points. In one implementation, the central controller provides a pre-allocation list to a wireless client that is requesting pre-allocation. By limiting a wireless client's ability to pre-allocate resources, the central controller optimally manages the resources of the wireless network. In alternative embodiments, the central controller can terminate pre-allocations between a wireless client and one or more wireless access points to enforce pre-allocation policy on the wireless network infrastructure.

Abstract: Methods, apparatuses, and systems directed to facilitating roaming and client handoffs in wireless networks. In one implementation, the present invention is directed to a coordination mechanism facilitating handoffs of wireless clients in a wireless network infrastructure. In one implementation, the coordination mechanism minimizes the use of group- or multi-casting to provide a scalable wireless network roaming infrastructure.

Abstract: In a fixed channel wireless network system with a limited number of channels, assignment of the fixed channels between remote client elements and access elements is made systematically according to a set of criteria according for network loading and interference, then channel assignments are dynamically updated according to a priority to maintain optimal network performance with changing conditions of load and interference. The channel utilization problem is addressed at a system level rather than at a local level by treating the system as a three dimensional color mapping problem. All noise is treated as having a source in virtual access elements with an appropriate performance metric. The performance metric is used to select a channel set that minimize chances of interference and maximize user performance. Specifically, there are several parameter matrices which are managed and updated by a central resource management element, namely signal strength between elements, interference, and load.

Abstract: A congestion control system. In particular implementations, a method includes receiving packets into one or more queues and monitoring the one or more queues for congestion. The method also includes, if a number of packets in the one or more queues exceeds a first threshold, determining a congestion control mode. The method also includes generating a congestion control message indicating the congestion control mode and transmitting the congestion control message to one or more neighboring mesh nodes.

Abstract: A packet aggregation system. In particular implementations, a method includes accessing one or more transmit queues, each corresponding to a wireless client associated with a given wireless mesh access point of a plurality of mesh access points. The method further includes selecting a mesh access point of the plurality of mesh access points and selecting a transmit queue corresponding to a wireless client associated with the selected mesh access point. The method further includes aggregating packets that are destined for the selected wireless client, up to a size limit, taking into account the path to the selected mesh point as well as quality of service constraints, and composing and transmitting the aggregated packet to the selected mesh access point.

Abstract: In one embodiment, a method for acquiring service provider information includes querying a wireless network for service provider information, receiving an advertisement response containing advertising service scheduling information, and configuring a power conservation mode responsive to the advertising service scheduling information.

Abstract: Methods, apparatuses and systems enabling a directed association mechanism in wireless computer network environments. In certain embodiments, the directed association functionality described herein can be used in a variety of contexts, such as directing wireless clients to associate with a desired access element or subset of access elements in a wireless network environment. In certain embodiments, the present invention can also be used to increase the efficiency of handing off wireless clients between access elements. The directed association mechanism, in one embodiment, increases the efficiency of establishing wireless connections between wireless clients and access points in a wireless network system.

Abstract: In one embodiment, a method for acquiring service provider information includes querying a wireless network for service provider information, receiving an advertisement response containing advertising service scheduling information, and configuring a power conservation mode responsive to the advertising service scheduling information.