Network Access Control for Random MAC WiFi Authorization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

User devices may inadvertently connect to a public network instead of a private network, leading to restricted access to local services and a degraded WiFi experience.

Innovation Solution

A network device, such as a gateway, uses a MAC-based access control list and a computing device like a Radius/AAA server to verify user information and location, determining whether to authorize access to the public network based on a random MAC address and user credentials.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a user device uses a random MAC address to access the network, then privacy and security are improved, but the network device cannot authorize access based on device identifier

Engineering Contradiction:
Improveaccess authorization reliabilityVSAvoidaccess control mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces user information (such as username, password, or device profile) as an intermediary between the random MAC address and the access authorization decision. The network device combines the random MAC address with user information to make the authorization determination, allowing both privacy preservation and reliable access control.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the network device broadcasts both private and public networks, then network availability is improved, but user devices may accidentally connect to the public network instead of the private network

Engineering Contradiction:
Improvenetwork connectivity flexibilityVSAvoidnetwork connection accuracy
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements a feedback mechanism where the network device determines the user device's location or context information and uses this feedback to make intelligent access decisions. Based on the feedback about whether the device is at the user's residence or elsewhere, the network device automatically selects the appropriate network (private or public) to connect to, preventing accidental connections.

Inventive Principle:
Principle #23Feedback

3Measurement precision

If the network device automatically determines access based on location and user information, then access accuracy is improved, but the system complexity increases

Engineering Contradiction:
Improveaccess determination precisionVSAvoidaccess control system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent performs preliminary actions by pre-configuring the network device with location information, user information, and access policies before actual connection attempts. The network device has pre-established criteria for determining whether a device should access the private or public network based on location and user profile, enabling accurate automatic determination without complex real-time processing.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20250373606A1Methods and apparatuses for providing devices access to a private or public network
Publication Date: 2025.12.04 COMCAST CABLE COMM LLC
  • US20250373606A1 patent drawing
  • US20250373606A1 patent drawing
  • US20250373606A1 patent drawing

AI summary

Methods, systems, and apparatuses are described for providing devices access to a private or public network. A computing device may provide access to the private network or the public network for a user device that randomizes its device identifier (e.g., a Media Access Control (MAC) address). Access to the private network or the public network may be determined based on information associated with the user device and the computing device.