Identifiable Random MAC Addressing for Wi-Fi Privacy and Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The randomization of MAC addresses in Wi-Fi devices, while enhancing privacy by preventing tracking, causes issues with network operations such as steering, parental controls, and diagnostics, as it makes it difficult for networks to identify and manage connected devices consistently.
Innovation Solution
The implementation of an identifiable random MAC (IRM) addressing system, where a mobile station (STA) uses an identifiable random MAC address (IRMA) and key (IRMK) to associate with an access point (AP), allowing the AP to recognize and identify the STA while maintaining privacy by changing the IRMA and IRMK with each association, using a hash function to securely verify the STA's identity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If a STA uses a fixed MAC address for association, then network operations such as steering, parental controls, and diagnostics can be performed effectively, but the device can be easily tracked and monitored without user permission
Solution Approach 1:
The solution segments the MAC address functionality into two distinct components: a public random MAC address for external communication and tracking prevention, and a private persistent MAC address for network identification and management. This segmentation allows each address type to serve its specific purpose without compromising the other, resolving the contradiction between privacy protection and network manageability.
Solution Approach 2:
The patent introduces an intermediary mechanism - a mapping relationship maintained by the access point between the public random MAC address and the private persistent MAC address. This intermediary allows the network to track and manage devices using the private address while external observers only see the changing public address, thus preventing tracking while enabling network operations.
2Object-affected harmful factors
If a STA periodically changes its MAC address to prevent tracking, then privacy is enhanced, but network operations such as steering, parental controls, and diagnostics become difficult
Solution Approach 1:
The solution divides MAC address usage into two segments: a frequently changing public MAC address for privacy protection during external communications, and a stable private MAC address for reliable device identification within the network. This segmentation enables both privacy enhancement and consistent identification to coexist.
Solution Approach 2:
The access point performs preliminary action by establishing and maintaining a mapping between the public and private MAC addresses before network management operations are needed. This pre-established mapping ensures that even as public addresses change, the network can reliably identify and manage devices through their private addresses.
3Object-affected harmful factors
If a STA uses a random MAC address for each association, then tracking is prevented, but the AP cannot consistently identify and manage the STA across multiple associations
Solution Approach 1:
The patent employs an intermediary mapping mechanism at the access point that links the random public MAC address to a persistent private MAC address. This intermediary preserves device identity information internally while presenting only random addresses externally, thus preventing tracking without losing identity information needed for network management.
Solution Approach 2:
The solution extracts the identification function from the public MAC address and relocates it to the private MAC address. The public address is used solely for external communication and can be randomized, while the private address handles identification and tracking functions, separating these concerns to resolve the contradiction.
Data Source
AI summary
A method for a mobile station (STA) is described. The method may be performed to use an identifiable medium access control (MAC) random (IRM) address (IRMA) to associate to an access point (AP). The method includes exchanging one IRM key (IRMK) with the AP for each association of a plurality of associations; determining an IRM hash using the IRMA and the IRMK exchanged with the AP at an immediately previous association of the plurality of associations and/or a temporal element; associating to the AP using the IRMA as a transmitted address (TA); and transmitting an association request including the IRM hash. The transmitted association request triggers the AP to one or both of check a list of stored IRMKs to find one stored IRMK that together with the IRMA produces the IRM hash included in the association request and identify the STA by the one IRMK.