Machine Learning MAC Filtering for WLAN Security Under MAC Randomization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer devices using randomized MAC addresses can bypass MAC address ban filtering, allowing unauthorized access to enterprise networks, despite being banned.
Innovation Solution
Implement a system that checks for MAC randomization and, if enabled, also verifies against a hostname ban list to prevent unauthorized access, ensuring that only legitimate devices connect to the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MAC randomization is enabled to prevent tracking, then user privacy is improved, but network security is worsened as banned devices can bypass MAC filtering
Solution Approach 1:
The patent introduces hostname as an intermediary identifier to bridge the gap between MAC randomization and security filtering. Instead of relying solely on MAC addresses, the system uses hostname information (which can be obtained through deauthentication frames or other authentication mechanisms) as a mediator to identify and block banned devices even when they use randomized MAC addresses.
Solution Approach 2:
The patent adds a new dimension to the filtering approach by moving from single-dimensional MAC address filtering to multi-dimensional filtering that incorporates hostname information. This dimensional expansion allows the system to maintain security effectiveness despite MAC randomization, as blocking criteria now operate at multiple identification levels simultaneously.
2Object-affected harmful factors
If MAC address filtering is used to block banned devices, then network security is improved, but user privacy is worsened as device identity tracking is enabled
Solution Approach 1:
The patent segments the device identification process into separate components: MAC address filtering for initial access control and hostname filtering for bypass detection. This segmentation allows the system to maintain security while preserving privacy by using different identification mechanisms for different purposes, with hostname information serving as an additional layer that doesn't rely on persistent MAC address tracking.
3Object-affected harmful factors
If hostname filtering is added to detect bypass attempts, then network security is improved, but device complexity is worsened
Solution Approach 1:
The patent merges MAC address filtering and hostname filtering into a unified security mechanism that operates together. The access control list (ACL) integration allows both filtering criteria to be applied simultaneously through a single system framework, reducing operational complexity despite the added filtering dimension. The combined mechanism processes both MAC and hostname information through integrated comparison logic.
Data Source
AI summary
Specific connection request is refused responsive to a match on the MAC ban list. If not on the MAC ban list, and a station has MAC randomization enabled, the specific connection requests is also checked against the hostname ban list, wherein the specific connection request is refused responsive to a match on the hostname ban list. The specific new connection request is allowed to proceed responsive to not matching the MAC ban list and not matching the hostname ban list.