Probe Request Address Rotation for Location Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication technologies allow for passive location tracking of electronic devices using their unique MAC addresses, raising privacy and security concerns as users may be unaware of their location being tracked.
Innovation Solution
An electronic device requests and uses a block of addresses from an address-management server for probe requests, instead of its MAC address, to inhibit passive location tracking, with the addresses including manufacturer identifiers and pseudorandom numbers, ensuring location privacy and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If MAC address is used in probe requests for device identification, then device identification capability is improved, but location tracking vulnerability worsens
Solution Approach 1:
The identification system is segmented into multiple components: a permanent MAC address stored securely in the device, and multiple temporary probe request addresses obtained from an address management server. The temporary addresses are segmented further into different types (public, private, vendor-specific) that can be used in different scenarios, allowing the device to maintain identification capability while preventing tracking.
Solution Approach 2:
An address management server is introduced as an intermediary between the device and the network. This server acts as a mediator that issues temporary addresses to the device, which then uses these addresses in probe requests instead of its MAC address. The intermediary enables device identification while breaking the direct link between the device's permanent identifier and its location information.
2Loss of information
If temporary addresses are used in probe requests to prevent tracking, then location privacy is improved, but device identification capability worsens
Solution Approach 1:
The system implements feedback mechanisms where the address management server monitors and tracks the temporary addresses issued to devices. The server maintains a mapping between temporary addresses and the actual device MAC addresses, enabling it to identify devices when needed while the devices themselves remain anonymous to other network participants. This feedback loop preserves identification capability at the server level while protecting privacy at the device level.
Solution Approach 2:
The system changes the parameter used for identification in probe requests from the permanent MAC address to temporary, dynamically assigned addresses. These temporary addresses can be changed periodically or based on specific conditions, allowing the device to maintain identification capability through the address management server while preventing tracking by other devices that only see the changing temporary addresses.
3Adaptability or versatility
If MAC address is transmitted in probe requests, then communication compatibility is improved, but security vulnerability worsens
Solution Approach 1:
The device performs preliminary actions by obtaining temporary addresses from the address management server before engaging in normal communication. This preliminary step establishes a secure identification mechanism that replaces the vulnerable MAC address transmission, maintaining compatibility with existing Wi-Fi protocols while enhancing security through pre-configured temporary identifiers.
Data Source
AI summary
Passive tracking of an electronic device (and, more generally, the anonymous use of location-based services) is avoided by identifying the electronic device with different addresses in a block of addresses when transmitting probe requests. In particular, the electronic device may request and then receive the block of addresses from an address-management server. Subsequently, when a probe request is transmitted (e.g., to an access point), the electronic device may use one of the addresses in the block of addresses instead of the media access control (MAC) address. Furthermore, whenever subsequent probe requests are transmitted, the electronic device may include a different address in the block of addresses.