Randomized MAC Address Verification for Wireless AP Recognition

Solution Overview

Problem

The use of a globally unique and permanent MAC address in wireless communication devices exposes user privacy to network attackers, and the current methods for identity uniqueness recognition on devices with randomized MAC addresses lead to increased complexity and low time efficiency due to brute force testing.

Innovation Solution

A wireless communication method that involves encrypting or signing a first frame with a randomized MAC address and a sequence number to obtain a MAC address identity recognition key, allowing the AP device to promptly verify the randomized MAC address without brute force testing, using a sequence number corresponding to the MAC address identity recognition key.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the AP device performs brute force testing to recognize randomized MAC addresses, then the identity uniqueness recognition can be completed, but the complexity increases and time efficiency decreases

Engineering Contradiction:

Improveidentity uniqueness recognitionVSAvoidrecognition process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by having the STA device send authentication information (including MAC address identity recognition key) to the AP device before actual communication begins. The AP device stores this authentication information in advance, so when the STA uses a randomized MAC address later, the AP can directly retrieve the corresponding recognition key without brute force testing. This preliminary authentication setup eliminates the need for complex brute force testing during subsequent communication.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary mechanism by using a sequence number as a mediator between the randomized MAC address and the MAC address identity recognition key. The sequence number serves as a lookup index that allows the AP device to quickly retrieve the correct recognition key from stored authentication information, replacing the brute force testing process. This intermediary sequence number simplifies the recognition process significantly.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If the AP device performs brute force testing to verify randomized MAC addresses, then the identity recognition can be achieved, but the time efficiency is reduced

Engineering Contradiction:

Improveidentity uniqueness recognitionVSAvoidrecognition time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by having the STA device send authentication information (including MAC address identity recognition key) to the AP device before actual communication begins. The AP device stores this authentication information in advance, so when the STA uses a randomized MAC address later, the AP can directly retrieve the corresponding recognition key without brute force testing. This preliminary authentication setup eliminates the need for complex brute force testing during subsequent communication.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary mechanism by using a sequence number as a mediator between the randomized MAC address and the MAC address identity recognition key. The sequence number serves as a lookup index that allows the AP device to quickly retrieve the correct recognition key from stored authentication information, replacing the brute force testing process. This intermediary sequence number simplifies the recognition process significantly.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Object-affected harmful factors

If multiple STAs use randomized MAC addresses simultaneously, then user privacy is protected, but the computational burden on the AP device increases

Engineering Contradiction:

Improveuser privacy trackingVSAvoidcomputational burden

Core Design Contradiction:

Object-affected harmful factorsVSPower

Solution Approach 1:

The patent applies preliminary action by having the STA device send authentication information (including MAC address identity recognition key) to the AP device before actual communication begins. The AP device stores this authentication information in advance, so when the STA uses a randomized MAC address later, the AP can directly retrieve the corresponding recognition key without brute force testing. This preliminary authentication setup eliminates the need for complex brute force testing during subsequent communication.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary mechanism by using a sequence number as a mediator between the randomized MAC address and the MAC address identity recognition key. The sequence number serves as a lookup index that allows the AP device to quickly retrieve the correct recognition key from stored authentication information, replacing the brute force testing process. This intermediary sequence number simplifies the recognition process significantly.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12634692B2Wireless communication method, station device, and access point device

Publication Date: 2026.05.19 GUANGDONG OPPO MOBILE TELECOMMUNICATIONS CORP LTD

AI summary

A wireless communication, a station (STA) device, and an access point (AP) device are disclosed. The method includes: sending, by the STA device, a first frame by a randomized media access control MAC address that is encrypted or signed to the AP device. The first frame is configured to carry a first sequence number, the first sequence number is configured to obtain a MAC address identity recognition key of the STA device by the AP device, and the MAC address identity recognition key is configured to verify the randomized MAC address. Alternatively, the method includes: sending, by a STA device, a first message to an AP device. The first message includes a list of candidate MAC addresses encrypted by a public key of the AP device, and the list of candidate MAC addresses includes at least one randomized MAC address generated by the STA device.