LPWA Privacy Layer OUI Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing LoRa LPWA network join procedure lacks adequate security, allowing attackers to intercept and identify application providers and end-device information, as the join-request message is not encrypted, exposing sensitive details.
Innovation Solution
A privacy layer is introduced that replaces the Organizationally Unique Identifier (OUI) of the application server with its own OUI, masking the real owner's identity, and provides the end device with temporary OUIs for initial connection, followed by a re-join procedure using the privacy layer's OUI for all further network traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the join-request message is transmitted without encryption to allow devices to join the network, then network accessibility and ease of operation are improved, but security and privacy are worsened as attackers can intercept and identify application providers and end-device information
Solution Approach 1:
The patent introduces a privacy service as an intermediary component between end devices and the network. This privacy service receives join requests, strips or obfuscates identifying information (OUIs), and forwards anonymized requests to the network, thereby mediating between the need for network access and the requirement for privacy protection
Solution Approach 2:
The patent extracts and removes identifying information (specifically Organizationally Unique Identifiers or OUIs) from join-request messages before they are transmitted over the network. This extraction process separates the essential joining functionality from the sensitive identifying data, allowing devices to join while protecting their identity
2Loss of information
If OUI information is included in join-request messages to identify application providers, then traceability and accountability are improved, but privacy and security are worsened as spammers and hackers can trace actual owners
Solution Approach 1:
The privacy service acts as an intermediary that receives join requests containing OUI information, processes them to remove or replace identifying OUIs with anonymized placeholders, and forwards the modified requests to the network. This mediation maintains traceability through the privacy service while preventing direct exposure of actual owner identities
Solution Approach 2:
The patent creates anonymized copies of join-request messages where identifying OUI information is replaced with placeholder values. These copied messages are then transmitted to the network, preserving the structural and functional information needed for network joining while eliminating sensitive identifying details
Data Source
Figure 1~2
Figure 3~4
AI summary
A communication system comprising a wireless Low-Power Wide Area Network LPWA and a privacy layer to replace an application server OUI with a privacy layer owner or operator OUI.