Wi-Fi STA Identifier Opt-In During 4-Way Handshake Privacy Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Wireless networks assign identifiers that enable tracking without user consent, diminishing privacy enhancements and allowing monitoring even with changing MAC addresses, and new identifiers are correlated across associations.

Innovation Solution

A station (STA) can opt-in or opt-out of being identified by the access point (AP) through a Device Identifier Key Data Encapsulation (KDE) mechanism during the 4-way handshake protocol, allowing users to control data collection and deletion of identifiers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If wireless networks assign identifiers to enable tracking, then network management and user identification capability is improved, but user privacy is worsened

Engineering Contradiction:
Improvenetwork management capabilityVSAvoiduser privacy loss
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements dynamic identifier assignment where the network can switch between permanent identifiers (for normal operation) and temporary identifiers (for privacy protection). The identifier type changes based on user preferences and network policies, allowing the system to adapt between tracking capability and privacy protection modes.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the identifier parameter itself by introducing temporary identifiers that differ from permanent MAC addresses. This parameter change allows the network to maintain identification functionality while protecting user privacy, as temporary identifiers cannot be correlated to track user behavior across different sessions.

Inventive Principle:
Principle #35Parameter changes

2Measurement precision

If permanent identifiers are used for reliable user identification, then identification accuracy is improved, but tracking capability is worsened

Engineering Contradiction:
Improveidentification accuracyVSAvoiduser tracking
Core Design Contradiction:
Measurement precisionVSObject-generated harmful factors

Solution Approach 1:

The system dynamically switches between permanent identifiers (when identification accuracy is needed) and temporary identifiers (when tracking prevention is needed). This dynamic approach allows the same system to provide both high identification accuracy and tracking protection at different times based on user preferences.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent extracts the identification function from the permanent MAC address by introducing temporary identifiers. This separation allows the permanent identifier to be used only when necessary for accurate identification, while temporary identifiers handle routine communications without enabling tracking.

Inventive Principle:
Principle #2Taking out (Extraction)

3Object-affected harmful factors

If temporary identifiers are assigned frequently to protect privacy, then privacy protection is improved, but network overhead is worsened

Engineering Contradiction:
Improveprivacy protectionVSAvoidnetwork overhead
Core Design Contradiction:
Object-affected harmful factorsVSLoss of energy

Solution Approach 1:

Instead of continuously changing identifiers, the system uses periodic action by assigning temporary identifiers for specific durations or until certain events occur. This reduces the frequency of identifier changes and associated network overhead while still providing privacy protection during each temporary identifier's valid period.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The patent applies partial action by using temporary identifiers only when privacy protection is required, rather than continuously. This selective approach reduces network overhead compared to frequent identifier changes, while still achieving privacy protection when needed.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12574810B2Station identifier opt-in
Publication Date: 2026.03.10 APPLE INC
  • US12574810B2 patent drawing
  • US12574810B2 patent drawing
  • US12574810B2 patent drawing

AI summary

Embodiments are disclosed for station (STA) identifier opt-in. Some embodiments include a STA that can associate with an access point (AP) of a wireless network, where the STA is configured to opt-in to being identified by the AP. The STA can transmit a first message 2 (M2) of a 4-way handshake protocol during the association, where the first M2 includes a Device Identifier (ID) Key Data Encapsulation (KDE) that includes an Opt-in Control field, where a first value of the Opt-in Control field indicates the STA opts-in to being identified by the AP. The STA can receive a first message 3 (M3) of the 4-way handshake protocol including a Device ID KDE and an ID Blob, where the ID Blob corresponds to the STA. The STA can communicate with the AP, where the first value enables the AP to collect data about the STA during the communication.