Patent ID: 11863985
Assignee: WATCHGUARD TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 4:
5. An access point (AP), comprising:
at least one IEEE 802.11 radio configured to support at least one PHY (Physical layer) and MAC (Media Access Channel layer) defined by an IEEE 802.11 PHY standard;
a processor, operatively coupled to the at least one IEEE 802.11 radio;
memory, coupled to the processor; and
logic configured to,
generate a security token using at least one cryptographic operation employing a secret key;
broadcast a first beacon comprising a trusted beacon including a service set identifier (SSID) for the AP and containing the security token in a data field of a vendor-specific information element (IE) in the first trusted beacon;
receive a second beacon broadcast by the second AP including the SSID and second data in a data field of a second vendor-specific IE;
process the security token with the secret key to generate a first value;
process the second data in the data field of the second vendor-specific IE of the second beacon with the secret key to generate a second value; and
detect the second beacon was broadcast by an evil twin AP when the first and second values do not match.