Random Identifier Mapping for Privacy-Preserving Network Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User devices using random identifiers are unable to access identity-based services due to the non-persistent nature of these identifiers, leading to degraded user experience and vulnerability to tracking by third parties.
Innovation Solution
A user device sends a request to a network device using a random identifier, which is then associated with a persistent identifier through encryption and decryption, enabling access to identity-based services while mitigating tracking by nefarious actors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If a user device uses a random identifier to connect to a network, then privacy is improved and tracking by third parties is prevented, but the ability to access identity-based services deteriorates because the random identifier is not persisted by the network
Solution Approach 1:
The patent introduces an intermediary mechanism where the network device acts as a mediator between the random identifier (used for privacy) and the persistent identifier (required for services). The network device receives the random identifier, retrieves the associated persistent identifier from its database, and uses this persistent identifier to grant access to identity-based services while maintaining the random identifier for tracking prevention.
Solution Approach 2:
The patent segments the identification function into two separate components: the random identifier component (for privacy and tracking prevention) and the persistent identifier component (for service access). These two components work independently but are linked through the network device's database, allowing each to fulfill its specific function without compromising the other.
2Ease of operation
If a user device uses a persistent identifier to access identity-based services, then service access is improved, but privacy deteriorates because third parties can track the identifier through network sniffing and log tracking
Solution Approach 1:
The network device serves as an intermediary that shields the persistent identifier from exposure to the user device and third parties. The persistent identifier remains stored only in the network device's database, never transmitted to the user device or exposed in network logs, while still enabling service access through the random identifier interface.
Solution Approach 2:
The patent creates a functional copy mechanism where the random identifier serves as a temporary proxy or copy that references the persistent identifier in the network device's database. This copy allows service access without exposing the original persistent identifier, maintaining privacy while enabling functionality.
3Ease of operation
If the network persists the random identifier to enable identity-based services, then service access is improved, but the privacy benefit of randomization is lost because the identifier becomes trackable
Solution Approach 1:
The patent segments the persistence function so that only the mapping between random and persistent identifiers is persisted in the network device's database, not the random identifier itself in a form that would be trackable. The persistent identifier remains the only stored reference, while the random identifier maintains its ephemeral, untrackable nature.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
A network (e.g., Wi-Fi network, Internet, a private network, a public network, a content delivery network, cellular network, etc.) may be configured to uniquely identifying a user device (e.g., a mobile device, a smart device, a computer/computing device, a client device, etc.) using a random identifier (e.g., a random Media Access Control (MAC) address, etc.) and provide the user device identity-based services based on a secure transfer and identification of a persistent identifier (e.g., a MAC address, etc.) of the user device. The identity-based services may include: login-less network connection and/or reconnection, one or more subscription services, parental controls, content/advertisement tracking, private network access (e.g., identifier-based routing to private SSIDs, etc.), and/or the like.