Dynamic MAC Address Control in Aggregation Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In aggregation networks, the non-uniqueness of source MAC addresses due to their potential alteration by users or hardware vendors leads to issues like unauthorized connection stealing, which can be considered as a Denial of Service attack, as existing technologies lack effective mechanisms to ensure MAC address uniqueness and security.
Innovation Solution
A method and device that dynamically control and change MAC addresses in aggregation networks by allowing client devices to send their MAC addresses to server devices, which check for uniqueness and send new addresses if necessary, enabling the server to manage and enforce unique MAC addresses through protocols like DHCP and PPPoE, ensuring operator control and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the source MAC address is used as session identifier in PPP set-up, then the session identification is simplified, but the uniqueness of MAC address cannot be guaranteed leading to potential security issues
Solution Approach 1:
The patent introduces a server computer device as an intermediary between the client device and the network. The server receives the source MAC address from the client, verifies its uniqueness, and assigns a new MAC address if necessary. This intermediary role resolves the contradiction by maintaining simplified session identification through the server's coordination while ensuring MAC address uniqueness through active verification and assignment.
2Reliability
If additional information such as VP/VC or session_id is used to uniquely determine the session, then the uniqueness problem is solved, but the device complexity increases
Solution Approach 1:
The patent extracts the MAC address verification and assignment function from the client device and places it in the server computer device. By taking out this critical functionality to a centralized server, the system maintains session uniqueness without requiring complex additional information handling at the client side. The server manages the MAC address database and verification logic, simplifying the overall system architecture.
3Adaptability or versatility
If the MAC address is allowed to be changed by users or hardware vendors, then the adaptability is improved, but the security and uniqueness are compromised
Solution Approach 1:
The patent implements a feedback mechanism where the server computer device receives the source MAC address from the client device, checks whether it is already in use in the network, and provides feedback by assigning a new MAC address if the original one is duplicate or compromised. This feedback loop resolves the contradiction by allowing MAC address flexibility for adaptability while preventing unauthorized connection stealing through continuous verification and correction.
Data Source
AI summary
The present invention is related to a method to control and to change dynamically a MAC address in an aggregation network containing at least a server computer device and a client device, comprising the steps of:Sending from said client device to a server computer device a message (1,11) containing the MAC address of said client computer device,Retrieving said MAC address from said message at said server computer device (2,12),Checking if said MAC address is already in use (by a user) in said network or if said server computer device wants to change all MAC addresses in said network,If so, sending from said server computer device to said client device a message (3,13) containing a new MAC address for said client,Overwriting said MAC address with said new MAC address in said client computer device (4,14).