MAC Address Designation for Privacy and Network Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The IEEE 802.11-2020 Standard's MAC address randomization, intended to enhance privacy in Wi-Fi networks, creates issues with network operations such as steering, parental controls, and diagnostics, as it requires consistent MAC addresses for these functions while compromising user privacy.
Innovation Solution
A method for medium access control (MAC) address designation (MAAD) where an access point allocates a unique, random MAC address to a station for each association, using either robust action frames or key data encapsulation in the 4-way handshake, ensuring the station uses a different transmitter address for each association, thereby maintaining privacy without compromising network operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If MAC address randomization is implemented to enhance privacy, then user tracking is prevented, but network operations such as steering, parental controls, and diagnostics are compromised
Solution Approach 1:
The patent segments the MAC address functionality into two distinct parts: a random MAC address for privacy protection during scanning and association, and a persistent identifier stored in a database for network operations. This segmentation allows each part to serve its specific purpose without interfering with the other, resolving the contradiction between privacy and network functionality.
Solution Approach 2:
The patent introduces an intermediary mechanism - a database on the access point that stores the mapping between random MAC addresses and persistent identifiers. This intermediary allows network operations to reference devices through stable identifiers without exposing the actual MAC addresses used in communications, thus maintaining both privacy and operational capability.
2Adaptability or versatility
If a fixed MAC address is used for consistent network operations, then network functionality is maintained, but user privacy and tracking are compromised
Solution Approach 1:
The patent creates a copy of the identifier functionality - instead of using the actual MAC address for both privacy and identification purposes, it uses the MAC address only for privacy-protected communications and creates a separate persistent identifier copy stored in the database for network operations. This copying approach allows the system to maintain functionality without exposing the true MAC address.
Solution Approach 2:
The database acts as an intermediary that holds the persistent identifier, allowing network operations to function with stable references without requiring the actual MAC address to be visible or consistent in communications. This intermediary layer decouples the identification function from the communication address function.
3Object-affected harmful factors
If MAC address changes periodically for privacy, then tracking is prevented, but association consistency and network diagnostics are impacted
Solution Approach 1:
The patent performs preliminary action by establishing the persistent identifier and storing it in the database during the initial association process. This preliminary setup ensures that subsequent MAC address changes for privacy purposes do not affect the ability to maintain consistent associations, as the persistent identifier is already in place to track the device across different MAC addresses.
Solution Approach 2:
The persistent identifier stored in the database serves as an intermediary that maintains association consistency independent of MAC address changes. Network operations can reference devices through this stable identifier even as the communication MAC address changes periodically, ensuring reliability without compromising privacy.
Data Source
AI summary
A method, apparatus, and system are described. A method in an access point (AP) configured for medium access control (MAC) address designation (MAAD) is described. The AP is configured to wirelessly communicate with a station (STA). The method comprises determining a first MAC address of the STA, where the first MAC address is usable as a transmitter address (TA) of the STA for a subsequent association to the AP by the STA, and transmitting the first MAC address to the STA in one of a response action frame and a message of a multiple-message handshake process.