Multiple Link Layer Addresses for LAN Privacy and Continuity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Devices operating in local area networks face challenges in balancing LAN communications with user privacy, as changing MAC addresses interrupts communications and conflicts with security keying algorithms, while traditional globally unique MAC addresses compromise privacy.

Innovation Solution

Implementing a LAN MAC protection feature that uses multiple link layer addresses, where a first address remains unchanged and a second address can be changed, allowing seamless communication and privacy preservation by tunneling the unchanged address and using the changing address for wireless communications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Object-affected harmful factors

If a device changes its MAC address to preserve user privacy, then observer tracking is mitigated, but LAN communications are interrupted and security keying algorithms conflict

Engineering Contradiction:
Improveobserver trackingVSAvoidLAN communications continuity
Core Design Contradiction:
Object-affected harmful factorsVSReliability

Solution Approach 1:

The patent segments the MAC address functionality into two distinct addresses: a first MAC address used for wireless communications that can be changed, and a second MAC address used for LAN communications that remains unchanged. This segmentation allows the device to preserve privacy in wireless communications while maintaining reliable LAN communications by keeping the LAN MAC address static, thus resolving the contradiction between mitigating observer tracking and ensuring communications continuity.

Inventive Principle:
Principle #1Segmentation

2Reliability

If a device uses a globally unique MAC address for LAN communications, then communication reliability is maintained, but user privacy is compromised

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidprivacy compromise
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent divides the addressing system into two segments: a first MAC address for wireless communications that can be dynamically changed to protect privacy, and a second MAC address for LAN communications that remains static to ensure reliability. This allows the device to use a globally unique address for LAN communications while protecting user privacy in wireless contexts through address rotation, thus resolving the contradiction between communication reliability and privacy protection.

Inventive Principle:
Principle #1Segmentation

3Object-affected harmful factors

If a device uses multiple link layer addresses, then privacy and communication reliability are both preserved, but device complexity increases

Engineering Contradiction:
Improveprivacy protectionVSAvoidaddress management complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary mechanism in the form of an access point that manages the mapping between the first MAC address (used in wireless communications) and the second MAC address (used in LAN communications). This intermediary handles the complexity of address management, allowing the device to benefit from multiple addresses for privacy and reliability without bearing the full burden of address management complexity, thus resolving the contradiction between privacy protection and device complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20240397309A1Multiple link layer addresses for a device
Publication Date: 2024.11.28 BLACKBERRY LTD
  • US20240397309A1 patent drawing
  • US20240397309A1 patent drawing
  • US20240397309A1 patent drawing

AI summary

A device includes a link layer configured to use a first link layer address and a second link layer address, maintain the first link layer address unchanged for a duration of an association of the device with a wireless network, and change the second link layer address from a first value to a second value during the duration.