Approaches are described herein for link-layer address concealment for
transmission security (TRANSEC) enabled (TE) terminals in
satellite communication networks. For example, TE terminals can randomly select a proposed masked
system assigned identifier (mSAI), which is a temporary identifier different from any real identifiers of the terminal (e.g., a real SAI, real
electronic serial number, etc.). The
ground station (e.g., inroute group manager) checks availability of the mSAI. If available, the request is acknowledged, the mSAI is assigned to the terminal, and bandwidth is allocated to the terminal using the mSAI. Subsequent allocated bursts can be sent by the terminal using the allocated bandwidth based on the mSAI. Some embodiments include techniques for handling requests for an unavailable mSAI, simultaneous requests by different terminals for the same mSAI, periodic changes of mSAIs for added security, and use of mSAI-related timers to support additional features.