Dynamic PMKID Authentication for WiFi Privacy Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing WiFi technologies lack effective protection for identification information such as PMKID, leading to potential leakage and threats to user privacy during network access.
Innovation Solution
Generate and update identifiers based on random numbers, using hash operations and public keys, to protect user privacy by making identifiers dynamic and less susceptible to leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a temporary MAC address is used to protect user privacy, then user privacy is improved, but identification information such as PMKID remains vulnerable to leakage
Solution Approach 1:
The patent applies the Dynamics principle by making the identifier (PMKID) dynamic rather than static. The PMKID is updated periodically or when security conditions change, preventing attackers from using captured identifiers for prolonged tracking or replay attacks. This dynamic updating mechanism ensures that even if one PMKID is compromised, it becomes invalid after updates, thereby maintaining user privacy protection while eliminating the vulnerability of static identification information.
Solution Approach 2:
The patent implements parameter changes by modifying the PMKID value based on changing security parameters such as time stamps, random nonces, or security event triggers. This transformation of the identifier parameter ensures that the same user session produces different PMKID values under different conditions, preventing identification information leakage while maintaining the reliability of user privacy protection through cryptographic parameter transformations.
2Productivity
If fixed identification information is used for network access, then network access efficiency is improved, but identification information becomes susceptible to leakage and tracking
Solution Approach 1:
The patent resolves this contradiction by implementing a dynamic identifier system that maintains efficiency through rapid generation and validation of updated PMKID values. The system uses cryptographic algorithms that can quickly generate new identifiers without significant computational overhead, ensuring that network access remains efficient while the dynamic nature of the identifiers prevents leakage and tracking by making each access session unique and non-reusable.
3Device complexity
If no protection mechanism is applied to PMKID, then device complexity is reduced, but user privacy security deteriorates
Solution Approach 1:
The patent applies the Preliminary action principle by pre-configuring cryptographic algorithms, key management mechanisms, and identifier update protocols before network access occurs. These protective measures are built into the system architecture in advance, so when PMKID generation and updates occur, the security protection is already in place without adding operational complexity. The preliminary setup ensures user privacy security is maintained while keeping the actual access process simple and efficient.
Data Source
AI summary
A user privacy protection method, an apparatus, and a system. The method includes: obtaining a first random number; determining a first identifier according to the first random number; sending a first message carrying the first identifier to a second device, where the first message indicates the second device to perform authentication with a first device according to a cached result corresponding to the first identifier; establishing a connection to the second device in a case that the authentication succeeds; obtaining a second random number; updating the first identifier according to the second random number to obtain the updated first identifier; and sending a second message carrying the updated first identifier to the second device, where the second message indicates the second device to perform authentication with the first device according to a cached result corresponding to the updated first identifier.