DHCPv6 Client Privacy Protection via Dynamic Random Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The static DHCP unique identifier (DUID) in IPv6 networks is easily monitorable or stealable, compromising the privacy of DHCPv6 client apparatus during network transmission.
Innovation Solution
A message processing method where DHCPv6 client apparatus uses a first random identifier to request an IPv6 address from a DHCPv6 server, and subsequently generates a second random identifier using a preset algorithm for subsequent messages, ensuring the DUID is not included, thereby protecting privacy and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a static DUID is used to identify the DHCPv6 client apparatus, then the client can be reliably identified across multiple interactions, but the privacy of the client is exposed as the DUID is easy to monitor or steal during network transmission
Solution Approach 1:
The patent transforms the static DUID into a dynamic identifier system. Instead of using a fixed DUID, the system generates different random identifiers for different interaction phases (first random identifier for initial address request, second random identifier for subsequent communications). This dynamic approach maintains reliable client identification through algorithmic correlation while preventing privacy exposure since each identifier is temporary and cannot be traced back to the original DUID.
Solution Approach 2:
The patent segments the identification process into distinct phases with different identifiers. The first random identifier is used specifically for the initial IPv6 address assignment request, while the second random identifier is used for subsequent communications. This segmentation isolates the privacy-sensitive DUID from direct network transmission while maintaining identification continuity through the algorithmic relationship between the segmented identifier stages.
2Object-affected harmful factors
If random identifiers are used instead of DUID, then privacy is protected, but the server must verify the relationship between different random identifiers to maintain session continuity
Solution Approach 1:
The patent changes the parameter of identifier generation from static (DUID) to dynamic random values, while introducing a verification parameter (algorithm identifier) that simplifies the complexity. The server stores the first random identifier and uses a preset algorithm to verify if the second random identifier is derived from it, rather than implementing complex cryptographic verification. This parameter change approach protects privacy through randomness while keeping verification simple through algorithmic correlation.
Solution Approach 2:
The patent employs disposable random identifiers that are short-lived and used only for specific interaction phases. The first random identifier is used for address request and then discarded, replaced by the second random identifier for subsequent communications. These cheap, temporary identifiers protect privacy by eliminating the need for long-term storage and complex verification, as each identifier is inexpensive to generate and verify through simple algorithmic comparison.
3Reliability
If the DUID is removed from messages, then network transmission security is improved, but the client apparatus needs to generate and manage multiple random identifiers
Solution Approach 1:
The patent implements self-service identifier management where the client apparatus autonomously generates both the first and second random identifiers using preset algorithms, without requiring server assistance or complex coordination. The client independently manages the transition from first to second identifier by applying the preset algorithm to the first identifier, thereby improving network transmission security by removing DUID while keeping device complexity low through automated self-service generation and management.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A message processing method, apparatus, and system are provided. The method includes: sending, by a DHCPv6 client apparatus, a first message used to request assignment of an IPv6 address to a DHCPv6 server, where the first message includes a first random identifier used to identify the DHCPv6 client apparatus, and the first message does not include a DUID; receiving a first reply message that is from the DHCPv6 server and that includes a first IPv6 address, first configuration information, and the first random identifier; sending a second message to the DHCPv6 server, where the second message includes a second random identifier generated by using a preset algorithm and the first random identifier and used to identify the DHCPv6 client apparatus, the second random identifier is different from the first random identifier, and the second message does not include the DUID; and receiving a second reply message that is from the DHCPv6 server and that includes a second IPv6 address, second configuration information, and the second random identifier. Therefore, a problem that privacy is easy to monitor or steal in an interaction process between the DHCPv6 client apparatus and the DHCPv6 server is resolved.