Peer Discovery Using Rotating Private Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In ad hoc peer-to-peer wireless communication networks, existing methods for peer discovery compromise anonymity and privacy, as devices broadcast public identifiers, allowing unauthorized tracking and lack of control over communication duration with other devices.
Innovation Solution
A method where a first public identifier is used to generate a set of keys with varying validity periods, allowing only explicitly chosen peers to derive a private second identifier for communication, which is periodically changed to enhance security and privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If devices broadcast public identifiers for peer discovery, then peer discovery capability is improved, but user anonymity and privacy are compromised
Solution Approach 1:
The public identifier is segmented into multiple components: a stable base identifier and multiple temporary identifiers derived from different keys. Each temporary identifier can be independently used for peer discovery, while the base identifier remains protected. This segmentation allows peer discovery to occur using temporary identifiers without exposing the stable base identifier, thus maintaining anonymity.
Solution Approach 2:
Temporary identifiers act as intermediaries between the protected base identifier and the peer discovery process. These temporary identifiers are derived from cryptographic keys and can be safely broadcast without compromising the base identifier. The intermediary temporary identifiers enable peer discovery while shielding the actual user identity.
2Productivity
If devices broadcast identifiers continuously for peer discovery, then peer availability is improved, but tracking and privacy risks increase
Solution Approach 1:
The system dynamically generates and rotates temporary identifiers at regular intervals. Instead of broadcasting a static identifier continuously, the device periodically changes the temporary identifier used for peer discovery. This dynamic rotation maintains peer availability (peers can still be discovered) while preventing tracking (adversaries cannot correlate identifiers across time periods).
Solution Approach 2:
The system implements periodic identifier rotation where temporary identifiers are generated and broadcast in periodic cycles. Each cycle uses a new temporary identifier derived from the base identifier and a rotating key. This periodic action ensures peers remain discoverable within each cycle while breaking tracking continuity between cycles.
3Reliability
If temporary identifiers are derived from cryptographic keys, then security is improved, but system complexity increases
Solution Approach 1:
The base identifier and cryptographic key pair are generated in advance before peer discovery begins. This preliminary setup establishes the security foundation, allowing temporary identifiers to be efficiently derived during operation without requiring complex real-time key generation. The advance preparation reduces operational complexity while maintaining security.
Solution Approach 2:
The system uses the base identifier and private key to self-generate temporary identifiers through cryptographic derivation. Instead of requiring external key management services or complex authentication protocols, the device autonomously derives temporary identifiers from its own private key and the base identifier, simplifying the overall system architecture while ensuring security.
Data Source
AI summary
In an ad hoc peer-to-peer type network during peer discovery, information relating to users of various devices is broadcast to other devices in the network, which can compromise privacy of the users. Instead of announcing a public identifier that might be known by a multitude of individuals, the user device announces a private identifier that might be known to, or determined by, a select few individuals. The individuals selected can be given a key to determine the private identifier associated with a public identifier, or vice versa, wherein that key can have a validity range or a period of time, after which the key expires. Prior to the expiration of the key, the selected individuals, through their respective devices, can detect a corresponding user and/or device by the current private identifier being announced, thus mitigating the number of people that are aware of the user's presence.