Stable Machine Identifier for Wireless Session Continuity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Legacy network infrastructure struggles to accommodate device address rotation, leading to session instability and privacy concerns due to the lack of a mechanism for exchanging stable machine identifiers (SMIs) between wireless client devices and authentication services.

Innovation Solution

Introduction of a new SMI attribute and method for exchanging stable machine identifiers between wireless client devices, network access devices, and authentication services, ensuring seamless session continuity and enhanced privacy by mapping device addresses to stable identifiers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Object-affected harmful factors

If device address rotation is implemented to improve privacy, then privacy protection is improved, but network infrastructure compatibility deteriorates

Engineering Contradiction:
Improveprivacy protectionVSAvoidnetwork infrastructure compatibility
Core Design Contradiction:
Object-affected harmful factorsVSAdaptability or versatility

Solution Approach 1:

The patent introduces a stable machine identifier (SMI) as an intermediary that mediates between the rotating device address and the network infrastructure. The SMI remains constant while the device address changes, allowing legacy network infrastructure to maintain compatibility through the stable identifier while the device enjoys privacy protection through address rotation. The authentication service uses the SMI to track and manage devices regardless of address changes.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If device address rotation is implemented, then privacy protection is improved, but session stability deteriorates

Engineering Contradiction:
Improveprivacy protectionVSAvoidsession stability
Core Design Contradiction:
Object-affected harmful factorsVSStability of the object's composition

Solution Approach 1:

The stable machine identifier (SMI) serves as a mediator that maintains session stability during address rotation. The authentication service binds the SMI to the device's network session, allowing the session to persist across address changes. When a device rotates its address, the authentication service continues to recognize it through the unchanged SMI, preventing session termination and ensuring continuous service.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent establishes the SMI-to-address mapping in advance during the authentication process. The authentication service pre-configures the relationship between the stable identifier and the initial device address, creating a lookup table that enables future address rotations without breaking the session. This preliminary binding allows the system to anticipate and handle address changes smoothly.

Inventive Principle:
Principle #10Preliminary action

3Object-affected harmful factors

If device address rotation is implemented, then privacy protection is improved, but device identification accuracy deteriorates

Engineering Contradiction:
Improveprivacy protectionVSAvoiddevice identification accuracy
Core Design Contradiction:
Object-affected harmful factorsVSMeasurement precision

Solution Approach 1:

The stable machine identifier (SMI) acts as an accurate intermediary for device identification that remains invariant during address rotation. The authentication service uses the SMI to uniquely and accurately identify devices, eliminating misidentification issues. The SMI provides a reliable fingerprint for the device that does not change with address rotations, ensuring precise identification while maintaining privacy through address changes.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20240373230A1Authentication service with address rotation support
Publication Date: 2024.11.07 CISCO TECHNOLOGY INC
  • US20240373230A1 patent drawing
  • US20240373230A1 patent drawing
  • US20240373230A1 patent drawing

AI summary

To improve adaptation of network infrastructure to address rotations performed by wireless client device, embodiments provide for an exchange of a stable machine identifier (SMI) between a network access device and an authentication service. Some embodiments define a new SMI attribute that is included in a authentication service access-request and/or access-accept message. When a network access device obtains an SMI for a particular wireless client device, the network access device passes the SMI to the authentication service. Similarly, if an authentication service obtains a SMI value for a wireless client device, this information is provided to a network access device.