1. www.swan.ac.uk/lis

2. Crowd-Sourcing Wi-Fi Coverage Data to build Self- Mapping Radio Maps TNC2013 Gareth Ayres (Speaker) Jason Jones 2013

3. www.swan.ac.uk/lis About the Authors Gareth Ayres (me) Wireless Network Officer, Swansea University PhD Student (part-time) Author of SU1X Jason Jones Lecturer Swansea University My PhD Tutor

4. www.swan.ac.uk/lis Introduction – Key Terms I know I don’t need this slide here, but just in case… eduroam – (education roaming) is the secure, world-wide roaming access service developed for the international research and education community. Wi-Fi – WLAN based on any 802.11 standard LBS – Location Based Service – A service that makes use of the context of a devices location

5. www.swan.ac.uk/lis Introduction – Key Terms Supplicant – Software used to authenticate a device to a 802.1x network Location Fingerprint – a record of information (signal strength in this case) derived by a device about a given location at a specific time. (Coverage Data) Radio Map – A map of information (location fingerprints) about RF properties such as signal strength or signal-noise-ratio and associations between nodes. Abstract, not geographic.

6. www.swan.ac.uk/lis The Problem/Solution Problem: Poor wireless coverage maps LBS’s poor as no location data Need rough AP locations at least Solution: Build self-mapping radio maps using crowd-sourced data Not brilliant, but a first step and better than present

7. www.swan.ac.uk/lis Graph (or radio map) Graph theory is the study of graphs, which are mathematical structures used to model pairwise relations between objects. - wikipediagraphs Vertices – nodes, in this case wireless access points Edges – An association between nodes (not that type!) Weights – Used to describe proximity between associated nodes/vertices in this case

8. www.swan.ac.uk/lis Simple Graph

9. www.swan.ac.uk/lis Introduction – Setting the Scene Wi-Fi at Swansea University: CISCO WLAN controllers >1000 Wireless Access Points ~3000 staff, ~10000 students ~8000 users a day, ~6000 consecutively connected devices eduroam primary ssid Use SU1X for Windows configuration

10. www.swan.ac.uk/lis Introduction – SU1X Supplicant Configuration Tool: SU1X – Open Source, Windows XPSP3->Win8 Configures a wireless profile Sets EAP credentials Like eduroamCAT… http://sourceforge.net/projects/su1x/ https://github.com/GarethAyres/SU1X

11. www.swan.ac.uk/lis Introduction - LocPriS LocPriS – A security and privacy preserving location based services development framework http://locpris.swan.ac.uk Paper: http://link.springer.com/chapter/10.1007%2F978-3-642- 15384-6_60http://link.springer.com/chapter/10.1007%2F978-3-642- 15384-6_60 Part of my PhD project

12. www.swan.ac.uk/lis Crowd-Sourcing Data The Idea: SU1X modified to capture location fingerprints Opt-out during installer Only runs on first-run and reauths. Location Fingerprints sent to LocPriS server HTTPS GET request PHP parses, cleans, validates data etc Fingerprint stored in MySQL DB

13. www.swan.ac.uk/lis Typical Location Fingerprint Location Fingerprint: SSID, BSSID, ID, RSS, TYPE, TIME March 14 th 2012: 16314 rows from 172 devices eduroam00175968AAAA1234580g2013-04-30 15:38:52 eduroam00175968FFFF1234546g2013-04-30 15:38:52 eduroam00175968BBBB1234572g2013-04-30 15:38:52

14. www.swan.ac.uk/lis Example Location Fingerprinting Two Devices: MN1 & MN2 Three Buildings, A, B & C 7 Access Points, A1..C3 (Potentially multiple BSSIDs but ignore this for now as we use eduroam)

15. www.swan.ac.uk/lis Example Location Fingerprinting Two Location Fingerprints: MN1: [{A1, 80},{A2,46},{C1,72}] MN2: [{B2, 52},{C2,59},{C3,49}]

16. www.swan.ac.uk/lis Example Location Fingerprinting E(Vx,Vy) = {MNi,Vx} + {MNi,Vy} Where: E(Vx,Vy)=Edge weight between Vx,Vy MNi = Mobile Node i Vx,Vy= Two Wi-Fi Access Points (Vertices)

17. www.swan.ac.uk/lis Example Location Fingerprinting E(x,y) = {MN1,A1} + {MN1,A2} E(A1,A2)=80+46=126 E(B2,C3)=52+49=101 E(A2,C1)=72+46=118 E(B2,C2)=52+59=111 E(A1,C1)=80+72=152 E(C2,C3)=59+49=108

18. www.swan.ac.uk/lis Force-Directed Layouts Force-Directed Graph Draws graphs according to an algorithm of physical system Forces set between edges (weights) Attract and Repel like springs Graph visualisation Using Gephi for visualisation in the following slides Moving to DS3.js for web based visualisation More control over force-directed layout algorithm

19. Data from March 11 th – 12 th 2013 687 Vertices 13361 Edges 167 Devices

20. Data from March 11 th - 13 th 2013 735 Vertices 15575 Edges 302 Devices

21. Data from March 11 th - 14 th 2013 768 Vertices 17597 Edges 461Devices

22. Data from March 11 th - 15 th 2013 789 Vertices 19877 Edges 633 Devices

23. Data from March 11 th - 16 th 2013 791 Vertices 20387 Edges 724 Devices

24. Data from March 11 th - 17 th 2013 792 Vertices 20881 Edges 856 Devices

26. www.swan.ac.uk/lis Augmented Map and Anchors Radio map lacks orientation, position and scale in real world. Also suffers from flipping. Solutions is Anchor Nodes to produce an Augmented Radio Map (ARM): 1.Users manually locate themselves on map 2.GPS outside to give building periphery AP’s –Gathered from eduroam apps on smart phones?

27. www.swan.ac.uk/lis Sharing and Distribution of Radio Maps Graph Exchange XML Format (GEXF) Use standard xml techniques Share and combine graphs/radio maps

28. www.swan.ac.uk/lis Future Work Explorer/Improve new Force-Directed layout algorithms Different sources of fingerprints: RADIUS authentication logs Association logs D3.js visualisation of graphs

29. www.swan.ac.uk/lis End Questions? Gareth Ayres g.j.ayres@swansea.ac.uk