Device Tracking Across MAC Address Updates Using Telemetry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of IoT devices in networks makes it challenging to reliably track device types due to the ease of MAC address spoofing and randomization, leading to misclassification and security threats.
Innovation Solution
A machine learning-based service that maintains a database of MAC addresses and their associated telemetry data, using this data to identify and track devices across MAC address updates by matching new MAC addresses with existing ones, ensuring accurate device classification and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If MAC addresses are used to track devices, then device identification is straightforward, but MAC address spoofing and randomization cause tracking failures
Solution Approach 1:
The patent introduces an intermediary tracking system that observes MAC address transitions and uses machine learning to associate new MAC addresses with existing device profiles. This intermediary layer bridges the gap between MAC address changes and continuous device identification, allowing the system to maintain tracking reliability even when MAC addresses are spoofed or randomized.
Solution Approach 2:
The patent replaces the mechanical reliance on hardcoded MAC addresses with a machine learning-based classification system. Instead of depending on the physical MAC address identifier, the system uses behavioral analysis and telemetry data to identify devices, substituting the mechanical identification method with an intelligent, adaptive system that can handle MAC address changes.
2Measurement precision
If machine learning-based classification is implemented, then device type classification accuracy improves, but system complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-training machine learning models with telemetry data and device profiles before deployment. The system performs offline training and model preparation, so that when devices connect, the classification can be performed efficiently using pre-established patterns. This reduces the computational complexity during runtime while maintaining high classification accuracy.
Solution Approach 2:
The patent applies partial action by implementing machine learning classification selectively for devices that exhibit MAC address changes or uncertain identification. Not all devices require full machine learning analysis - the system uses simplified methods for straightforward cases and applies the more complex ML-based classification only when needed, reducing overall system complexity while maintaining accuracy where it matters most.
3Reliability
If telemetry data is collected and analyzed, then device tracking across MAC updates is enabled, but data processing requirements increase
Solution Approach 1:
The patent extracts only the essential telemetry data features needed for device identification and tracking, rather than processing all available network data. By selecting and focusing on specific relevant features (such as traffic patterns, protocol usage, and timing characteristics), the system reduces the volume of data that requires intensive processing while maintaining the ability to reliably track devices across MAC address changes.
Data Source
AI summary
In one embodiment, a service maintains a database of media access control (MAC) addresses of devices in a network and their associated telemetry data captured from the network. The service identifies a new MAC address being used by a particular device in the network. The service matches telemetry data associated with the new MAC address with telemetry data in the database associated with another MAC address, by using the telemetry data associated with the new MAC address as input to a machine learning-based classifier. The service determines, based on the matching, that the MAC address in the database associated with the matched telemetry data has been updated to the new MAC address by the particular device.