Client Identification via MAC and Behavior Matching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for client identification in network devices, such as those using user behavior characteristics, are inefficient and resource-intensive, leading to delayed identification and potential network performance degradation due to the need for long-term monitoring and parsing of communication data packets.

Innovation Solution

A method involving the acquisition and matching of MAC addresses and characteristic information from a user information table, allowing for quick client identification without significant resource occupation, by marking clients as successfully identified or to be detected based on MAC address matches and further processing characteristic information from data packets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If user behavior characteristics are used for client identification, then identification accuracy can be improved, but system resources are occupied for a long time and network performance degrades

Engineering Contradiction:
Improveidentification accuracyVSAvoidnetwork device performance
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The patent pre-collects and stores user behavior characteristics (such as DNS request patterns, HTTP headers, application layer information) in a database before identification is needed. When a client connects, the system quickly queries pre-processed behavior data rather than collecting and analyzing raw packets in real-time, thus achieving accurate identification without occupying system resources for extended periods

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent extracts only the most critical identification features from user behavior data (such as specific HTTP headers, DNS query patterns, or application layer signatures) and stores these extracted characteristics separately. This allows the system to perform fast pattern matching on compact feature data rather than processing complete packet streams, improving both identification accuracy and system efficiency

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If long-term monitoring of user packets is performed, then reliable behavior analysis can be acquired, but network delay and congestion occur

Engineering Contradiction:
Improvebehavior analysis reliabilityVSAvoidnetwork delay
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary collection and statistical analysis of user behavior characteristics during off-peak periods or in the background, storing processed behavior patterns in advance. When identification is required, the system simply queries the pre-analyzed behavior data, achieving reliable behavior analysis without causing real-time network delay

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements a two-stage identification process: first, a quick MAC address-based identification is performed to immediately recognize returning clients; second, behavior characteristic analysis is only deeply performed when needed (e.g., for new clients or when MAC address identification fails). This skipping approach reduces unnecessary processing time and network delay while maintaining reliable identification

Inventive Principle:
Principle #21Skipping (Rushing through)

Data Source

PatentUS12170665B2Client identification method and apparatus, and storage medium and network device
Publication Date: 2024.12.17 TP LINK CORP LTD
  • US12170665B2 patent drawing
  • US12170665B2 patent drawing

AI summary

A client identification method, an apparatus, a storage medium and a network device. The method includes: acquiring, when any client is associated with a network device, a MAC address of the client; searching and matching the MAC address from a user information table, which includes MAC addresses of all clients that have ever been associated with the network device and characteristic information corresponding to each of the MAC addresses; marking the client as successfully identified when the matching of the MAC address is successful; and marking the client as to be detected when the matching of the MAC address is failed, acquiring the characteristic information of the client from a data packet sent by the client, searching and matching the characteristic information of the client from the user information table, and identifying the client according to the matching result.