Multi-Link Terminal Identification for Secure MAC-Randomized Wi-Fi
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The use of fixed MAC addresses in terminal devices for network connections is vulnerable to MAC address sniffing, leading to tracking and location of connections, and causes failures in network management due to random MAC address technologies.
Innovation Solution
Implementing a multi-link communication method using pre-configured terminal and link identifiers to establish secure connections between multi-link terminal and network devices, reducing sniffing and improving security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a fixed MAC address is used for terminal device identification, then network management and device authentication are enabled, but the terminal device becomes vulnerable to MAC address sniffing and tracking by third-party devices
Solution Approach 1:
The patent applies dynamics by transitioning from a static fixed MAC address to a dynamic identifier system. The terminal device uses a random MAC address for initial connection and then switches to a dynamic identifier (such as a temporary ID or hashed identifier) for subsequent communications. This dynamic identifier changes periodically or based on communication context, making it difficult for third-party devices to track or sniff the terminal's true identity while maintaining network management capabilities.
Solution Approach 2:
The patent introduces an intermediary identifier system between the terminal device and the network. Instead of exposing the fixed MAC address directly, the system uses a mediator identifier that the network device generates and manages. This intermediary identifier shields the terminal's true MAC address from external sniffing while allowing the network to perform authentication and management functions through the mediator layer.
2Object-affected harmful factors
If a random MAC address is used to prevent sniffing, then communication security is improved, but device MAC address-related functions defined by Wi-Fi Alliance and Wi-Fi Broadband Alliance fail
Solution Approach 1:
The patent applies preliminary action by pre-configuring the terminal device with multiple identifiers including a random MAC address and alternative identifiers (such as device IDs or hashed identifiers). Before the random MAC address causes network management failures, the system has already prepared backup identifiers that can be switched to. The terminal and network device establish a mapping relationship in advance, allowing seamless transition when the random MAC address becomes problematic.
Solution Approach 2:
The patent changes the parameter of device identification from a single fixed MAC address to a multi-parameter identifier system. The terminal device maintains multiple identification parameters (random MAC address, device ID, hashed identifier) and dynamically selects which parameter to use based on communication context. This parameter change allows the system to avoid using the random MAC address for functions that require stable identification, thereby preventing network management failures while still benefiting from randomization for security.
3Productivity
If traditional single-link communication is used, then device complexity is low, but data transmission throughput is limited and latency is high
Solution Approach 1:
The patent applies segmentation by dividing the communication channel into multiple independent links between the terminal device and network device. Instead of using a single communication path, the system establishes multiple parallel links (such as multiple wireless channels or frequency bands). Each link can independently transmit data, allowing the system to aggregate throughput across all links while maintaining manageable complexity through modular link management.
Solution Approach 2:
The patent makes the communication system multi-functional by enabling the terminal and network devices to operate across multiple links simultaneously. The same device can handle authentication, data transmission, and link management across different communication channels. This universality allows the system to achieve high throughput through multi-link aggregation while using a unified management approach that prevents excessive complexity.
Data Source
Figure 1~2
Figure 3~5
Figure 6~10
AI summary
The present application belongs to the technical field of communications. Disclosed are communication methods, a device and a storage medium. A method comprises: a multi-link terminal device acquiring a pre-configured terminal identifier and/or at least one link identifier; and the multi-link terminal device sending to a multi-link network device a first frame which contains the terminal identifier and/or the at least one link identifier, so that the multi-link network device identifies the multi-link terminal device and/or a link according to the terminal identifier and/or the at least one link identifier.