Dynamic Hashed MAC Address for Wireless Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless data networks face vulnerabilities in MAC address privacy, as static MAC addresses can be detected and exploited by rogue devices, and previous solutions that change MAC addresses upon attaching to new access points still leave devices susceptible to tracking and reverse-engineering attacks.
Innovation Solution
The implementation of dynamically hashed MAC addresses based on epochal transmission sequence values and shared secret values, which replace static MAC addresses in data frames transmitted at specific time slots, ensuring that only authorized devices can recover the original addresses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If static MAC addresses are used for device identification, then network communication is simplified and devices can be easily identified, but MAC address privacy is compromised and devices become vulnerable to tracking and reverse-engineering attacks by rogue devices
Solution Approach 1:
The patent implements dynamic MAC address generation by hashing the prescribed MAC address with a time-varying counter value. This creates a different hashed MAC address for each transmission, making the system dynamic rather than static. The hashed MAC address changes over time while still allowing authorized devices to recover the original address through the same hashing process.
Solution Approach 2:
The patent introduces a hashed MAC address as an intermediary between the original MAC address and the network transmission. This intermediary layer protects the original MAC address from direct exposure while enabling communication. The hashed address serves as a mediator that maintains privacy but still allows authorized devices to identify and communicate with the correct device.
2Object-affected harmful factors
If MAC addresses are changed when attaching to new access points, then some privacy protection is achieved, but devices remain susceptible to tracking across different access points and reverse-engineering attacks
Solution Approach 1:
The patent implements periodic changes to the MAC address by incorporating a counter that increments with each transmission. This periodic action ensures that the MAC address changes regularly, preventing tracking across different access points and time periods, while the deterministic nature of the hashing function ensures reliable identification for authorized devices.
Solution Approach 2:
The patent changes the parameters used in MAC address generation by incorporating a time-varying counter value and using cryptographic hashing. This transforms the static MAC address parameter into a dynamic one that changes with each transmission, providing both privacy protection and reliable identification through the cryptographic relationship between the original and hashed addresses.
3Object-affected harmful factors
If dynamically changing MAC addresses are implemented for each transmission, then MAC address privacy and security are significantly improved, but device complexity increases due to the need for hashing operations and time-synced counter management
Solution Approach 1:
The patent implements self-service by having each device independently generate its own hashed MAC address using its prescribed MAC address and local counter. This eliminates the need for centralized MAC address management and allows devices to autonomously maintain security without external coordination, reducing overall system complexity.
Solution Approach 2:
The patent makes the hashing function universal by using the same cryptographic hash algorithm across all devices in the network. This multi-functionality allows the same mechanism to serve both privacy protection and reliable identification purposes, reducing the need for separate systems and lowering overall complexity.
4Object-affected harmful factors
If hashed MAC addresses are used in data frames, then rogue devices cannot detect or exploit original MAC addresses, but the ability to recover original addresses requires shared secret values and synchronized counters among authorized devices
Solution Approach 1:
The patent uses the hashed MAC address as an intermediary that protects the original MAC address from rogue devices. The cryptographic hash function acts as a mediator that one-way transforms the original address, preventing reverse-engineering by unauthorized devices while allowing authorized devices with the counter to recover the original address.
Solution Approach 2:
The patent applies preliminary anti-action by pre-hashing the MAC address before transmission, preventing rogue devices from accessing the original address in the first place. This proactive measure blocks potential exploitation before it can occur, rather than attempting to respond to attacks after they are detected.
Data Source
AI summary
In one embodiment, a method comprises: generating, by a transmitting network device, a hashed source media access control (MAC) address and a hashed destination MAC address based on hashing a MAC address of the transmitting network device and a destination MAC address of a destination wireless network device, respectively, relative to an epochal transmission sequence value; and transmitting a data frame at a time slot associated with the epochal transmission sequence value, using the hashed source MAC address and the hashed destination MAC address, to the destination wireless network device.