Policy-Based MAC Address Rotation in Wireless Infrastructure

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing wireless network infrastructure struggles to accommodate device address rotation, which is intended to improve privacy by changing device addresses, due to legacy systems not being designed for this functionality, leading to potential disruptions and disconnections for certain devices.

Innovation Solution

A policy-driven technique is implemented within the wireless infrastructure to discover and classify wireless devices based on their category or class, allowing for the enforcement of specific Media Access Control (MAC) address rotation policies tailored to each device type, ensuring that only necessary devices rotate their MAC addresses.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Object-affected harmful factors

If device address rotation is implemented to improve privacy, then privacy protection is improved, but network stability and device connectivity deteriorate due to legacy infrastructure not being designed for address rotation

Engineering Contradiction:
Improveprivacy protectionVSAvoidnetwork stability
Core Design Contradiction:
Object-affected harmful factorsVSReliability

Solution Approach 1:

The patent applies local quality by implementing different address rotation policies for different device types. The system classifies devices into categories (e.g., mobile devices that benefit from rotation versus stationary devices that require stable addresses) and applies address rotation selectively to specific device classes rather than uniformly across all devices, thus protecting privacy for mobile devices while maintaining network stability for devices that require consistent addressing.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent implements dynamics by making the address rotation behavior adaptive and policy-driven rather than static. The system dynamically determines whether to rotate addresses based on device classification, network conditions, and configured policies, allowing the network to adapt its addressing behavior to different scenarios and device types, thereby balancing privacy enhancement with network stability.

Inventive Principle:
Principle #15Dynamics

2Object-affected harmful factors

If MAC address rotation is enforced for all devices, then privacy is improved, but device complexity and infrastructure requirements increase due to legacy systems not accommodating rotation

Engineering Contradiction:
Improveprivacy protectionVSAvoidinfrastructure complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent reduces infrastructure complexity by applying address rotation selectively to specific device classes rather than all devices. The system classifies devices based on their characteristics and applies rotation policies only where beneficial, avoiding the need to modify legacy infrastructure to support rotation for every device type, thus reducing the overall complexity burden on the network.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent implements partial action by applying address rotation to only the extent necessary for privacy protection. Rather than enforcing rotation universally, the system applies rotation selectively to device classes where it provides privacy benefits while being compatible with legacy infrastructure, avoiding the excessive complexity that would result from universal rotation enforcement.

Inventive Principle:
Principle #16Partial or excessive action

3Object-affected harmful factors

If address rotation is performed frequently, then privacy protection is improved, but network performance and device connectivity deteriorate due to repeated re-associations

Engineering Contradiction:
Improveprivacy protectionVSAvoidnetwork performance
Core Design Contradiction:
Object-affected harmful factorsVSProductivity

Solution Approach 1:

The patent implements periodic action by scheduling address rotations at controlled intervals rather than continuously or too frequently. The system rotates MAC addresses for classified devices at predetermined periods, providing privacy protection through periodic address changes while allowing sufficient time between rotations for devices to maintain stable connections and for the network to process address changes without performance degradation.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS12309885B2Policy-based wireless infrastructure-initiated device address rotations for a wireless local area network
Publication Date: 2025.05.20 CISCO TECHNOLOGY INC
  • US12309885B2 patent drawing
  • US12309885B2 patent drawing
  • US12309885B2 patent drawing

AI summary

Techniques herein facilitate policy-based wireless infrastructure-initiated device address rotations for wireless devices of a wireless local area network (WLAN). In one example, a method may include obtaining device information for a plurality of wireless devices connected to the wireless network infrastructure; associating a first wireless device of the plurality of wireless devices with a Media Access Control (MAC) address rotation policy based on device information obtained for the first wireless device; determining that a MAC address rotation is to be performed for the first wireless device based on the MAC address rotation policy; and triggering the MAC address rotation for the wireless device via the wireless network infrastructure.