Remote Device Association via LAN MAC Address

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current device fingerprinting technologies lack an accurate method to determine if multiple devices are under common control and operation, as IP addresses are not static and can be rotated, making them unsuitable for reliable identification of devices within the same household.

Innovation Solution

A device identification server associates devices with unique LAN MAC addresses of the router through which they connect to the wide area network, which are stable and not readily discoverable by interaction with the router through the WAN, to identify devices under common control and operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If IP addresses are used to identify devices, then devices can be remotely identified through the wide area network, but the identification becomes unreliable because IP addresses are not static and can be rotated

Engineering Contradiction:

Improveremote device identificationVSAvoiddevice identification accuracy

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent extracts the identification problem from the WAN IP address layer and moves it to the LAN MAC address layer. By obtaining the LAN MAC address of the router through which the device connects to the WAN, the system separates the identification function from the dynamic IP addressing system, thereby resolving the contradiction between remote identification capability and identification reliability

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces the LAN MAC address as an intermediary identifier between the device and the identification system. This intermediary is obtained through the router but is not readily discoverable through WAN interactions, providing a stable link between remote devices and their household identification while preventing direct spoofing attempts

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If WAN IP addresses are used for device identification, then devices can be accessed remotely, but the same IP address may be assigned to different households at different times, causing identification errors

Engineering Contradiction:

Improvenetwork address allocation flexibilityVSAvoidhousehold identification accuracy

Core Design Contradiction:

Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The patent transitions from one-dimensional WAN IP address identification to two-dimensional identification by combining WAN IP address with LAN MAC address. This dimensional change allows the system to maintain adaptability to IP rotation while achieving precise household identification through the stable MAC address component

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

3Ease of operation

If publicly discoverable data is used to identify devices, then identification can be performed through standard network interactions, but malicious entities can spoof such data

Engineering Contradiction:

Improveidentification process simplicityVSAvoidspoofing vulnerability

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent uses the router's LAN MAC address as an intermediary that is obtained through network interactions but cannot be directly spoofed through WAN communications. This intermediary maintains ease of operation by being obtainable through standard network protocols while preventing spoofing due to its non-disccoverable nature through the WAN interface

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent applies preliminary anti-action by using the LAN MAC address, which is established before WAN communication occurs and cannot be altered during WAN interactions. This pre-established identifier prevents malicious entities from spoofing identification data during network communications

Inventive Principle:

Principle #9Preliminary anti-action

Data Source

PatentUS8693473B2Remote recognition of an association between remote devices

Publication Date: 2014.04.08 UNILOC 2017 LLC

AI summary

A device identification server identifies a “household” to which a particular device belongs by associating the device with a LAN MAC address of the router through which the device connects to a wide area network such as the Internet because the LAN MAC address (i) is unique to the router and (ii) is not readily discoverable by interaction with the router through the wide area network, impeding spoofing by malicious entities. The device queries and receives the LAN MAC address of the router through the local area network. The device passes the LAN MAC address of the router along with its digital fingerprint to the device identification server. Devices that report the same LAN MAC address of the router through which they connect to the wide area network are determined to be from the same “household”, i.e., to be managed by one and the same entity.