LPWA Privacy Layer OUI Masking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing LoRa LPWA network join procedure lacks adequate security, allowing attackers to intercept and identify application providers and end-device information, as the join-request message is not encrypted, exposing sensitive details.

Innovation Solution

A privacy layer is introduced that replaces the Organizationally Unique Identifier (OUI) of the application server with its own OUI, masking the real owner's identity, and provides the end device with temporary OUIs for initial connection, followed by a re-join procedure using the privacy layer's OUI for all further network traffic.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the join-request message is transmitted without encryption to allow devices to join the network, then network accessibility and ease of operation are improved, but security and privacy are worsened as attackers can intercept and identify application providers and end-device information

Engineering Contradiction:
Improvenetwork accessibilityVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a privacy service as an intermediary component between end devices and the network. This privacy service receives join requests, strips or obfuscates identifying information (OUIs), and forwards anonymized requests to the network, thereby mediating between the need for network access and the requirement for privacy protection

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts and removes identifying information (specifically Organizationally Unique Identifiers or OUIs) from join-request messages before they are transmitted over the network. This extraction process separates the essential joining functionality from the sensitive identifying data, allowing devices to join while protecting their identity

Inventive Principle:
Principle #2Taking out (Extraction)

2Loss of information

If OUI information is included in join-request messages to identify application providers, then traceability and accountability are improved, but privacy and security are worsened as spammers and hackers can trace actual owners

Engineering Contradiction:
ImprovetraceabilityVSAvoididentity exposure
Core Design Contradiction:
Loss of informationVSObject-affected harmful factors

Solution Approach 1:

The privacy service acts as an intermediary that receives join requests containing OUI information, processes them to remove or replace identifying OUIs with anonymized placeholders, and forwards the modified requests to the network. This mediation maintains traceability through the privacy service while preventing direct exposure of actual owner identities

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates anonymized copies of join-request messages where identifying OUI information is replaced with placeholder values. These copied messages are then transmitted to the network, preserving the structural and functional information needed for network joining while eliminating sensitive identifying details

Inventive Principle:
Principle #26Copying

Data Source

PatentEP3306886B1LPWA communication system join-in
Publication Date: 2020.08.26 GIESECKE & DEVRIENT EPAYMENTS GMBH
  • EP3306886B1 patent drawingFigure 1~2
  • EP3306886B1 patent drawingFigure 3~4

AI summary

A communication system comprising a wireless Low-Power Wide Area Network LPWA and a privacy layer to replace an application server OUI with a privacy layer owner or operator OUI.