802.11 Frame Length Obfuscation for STA Privacy Protection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing wireless local area network (WLAN) technologies, particularly those adhering to IEEE 802.11 standards, fail to adequately protect user privacy by allowing traffic analysis that reveals user identities as they roam between different networks.

Innovation Solution

Implementing methods to randomly modify the length of medium access control service data units (MSDUs) by adding headers, padding, or fragmenting MSDUs to ensure consistent frame lengths, thereby obscuring traffic patterns and preventing identification of user devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If traffic analysis is performed on WLAN networks, then user identification and tracking becomes possible, but user privacy is compromised

Engineering Contradiction:
Improvetraffic analysis capabilityVSAvoiduser privacy
Core Design Contradiction:
Measurement precisionVSLoss of information

Solution Approach 1:

The patent applies the principle of changing observable characteristics by modifying frame length to appear uniform. All frames are padded or truncated to a standardized length, making them indistinguishable through length-based analysis. This transforms the observable property of frames from variable-length (which enables tracking) to uniform-length (which protects privacy), effectively changing the 'color' or appearance of the traffic to observers.

Inventive Principle:
Principle #32Color changes

2Loss of information

If frame length is standardized to protect privacy, then traffic analysis is frustrated, but additional processing overhead is introduced

Engineering Contradiction:
Improveuser privacy protectionVSAvoidframe processing complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by performing padding or truncation operations on frames before they are transmitted over the network. The privacy protection mechanism pre-processes all outgoing frames to ensure they meet the standardized length requirement, and similarly pre-processes incoming frames before delivery to upper layers. This advance preparation eliminates the need for complex real-time analysis and decision-making during transmission, reducing overall system complexity while maintaining privacy protection.

Inventive Principle:
Principle #10Preliminary action

3Loss of information

If random padding is added to MSDUs, then frame length obfuscation is achieved, but data transmission efficiency decreases

Engineering Contradiction:
Improvetraffic pattern obscurationVSAvoiddata transmission efficiency
Core Design Contradiction:
Loss of informationVSProductivity

Solution Approach 1:

The patent applies parameter changes by dynamically adjusting the length parameter of frames through random padding. The padding amount varies randomly within defined bounds, changing the physical length parameter of transmitted frames without affecting the logical data content. This parameter modification creates unpredictable traffic patterns that frustrate analysis while the random nature prevents systematic optimization, accepting some efficiency loss as necessary for privacy protection.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20250350398A1Frame length obfuscation methods to increase the privacy of STAs in 802.11 Networks
Publication Date: 2025.11.13 INTERDIGITAL PATENT HOLDINGS INC
  • US20250350398A1 patent drawing
  • US20250350398A1 patent drawing
  • US20250350398A1 patent drawing

AI summary

Methods and apparatuses are disclosed that provide for the protection of the privacy of individuals using wireless local area network (WLAN) technologies and protecting the identification of WLAN users of networks implementing IEEE 802.11 standards by frustrating attempts at traffic analysis that may compromise user privacy. Methods and apparatuses disclosed include randomly modifying the length of medium access control service data units (MSDUs) such that all frames sent/received among stations (STAs) associated with a particular access point (AP) are the same length such that all traffic appears the same to an observer. Other methods disclosed may include random padding of the MSDUs, and/or fragmenting/segmenting MSDUs. Finally, embodiments of a method are disclosed in which a new element is used to signal epoch parameters to a group or a single STA, identified by their Association Identifier (AID) via groupcast or broadcast, thereby preventing collisions that would result using conventional unicast techniques.