Wireless AP MAC Rotation for Group-Based Privacy and Collision Avoidance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing wireless communication technologies face challenges in enhancing data privacy due to static MAC addresses, which can be exploited for tracking and pose security risks, and independent STA address rotation leads to collisions and inefficient network management.

Innovation Solution

A wireless AP coordinates group and individual address rotations with epoch parameters, allowing STAs to choose participation and avoiding collisions, thus maintaining privacy and network efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If all STAs simultaneously change their MAC addresses at predefined epoch boundaries, then device tracking is obscured and privacy is enhanced, but collision between STAs selecting the same MAC address occurs and network management becomes inefficient

Engineering Contradiction:
Improveprivacy protectionVSAvoidnetwork management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments STAs into different groups (first group and second group) with different epoch boundaries. The first group changes MAC addresses at epoch boundaries determined by the AP, while the second group changes MAC addresses at different epoch boundaries. This segmentation prevents collisions by ensuring that STAs in different groups rotate addresses at different times, resolving the contradiction between privacy enhancement and network management complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The AP transmits epoch parameters to STAs in advance, allowing STAs to prepare for upcoming MAC address rotations. The AP determines epoch boundaries and communicates them to STAs before the actual rotation occurs, enabling STAs to synchronize their address changes without collisions and allowing the AP to pre-allocate unique MAC addresses from its cache, thereby reducing network management complexity.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If STAs independently choose their epoch boundaries for MAC address rotation, then collision avoidance is achieved, but the AP's ability to adapt to network demands is limited and resources are strained

Engineering Contradiction:
Improvecollision avoidanceVSAvoidAP adaptability to network demands
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic epoch parameters that the AP can adjust based on network conditions. The AP can modify epoch boundaries, epoch durations, and the number of STAs in each group according to real-time network demands and traffic patterns. This dynamic control allows the AP to optimize privacy protection effectiveness and resource utilization while maintaining collision avoidance through coordinated address rotation.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system incorporates feedback mechanisms where the AP monitors network conditions, collision rates, and privacy protection effectiveness, then adjusts epoch parameters accordingly. The AP receives information about STA behavior and network traffic patterns, uses this feedback to optimize epoch boundary timing and duration, and communicates updated parameters to STAs, thereby achieving both collision avoidance and adaptive resource management.

Inventive Principle:
Principle #23Feedback

3Reliability

If MAC addresses are rotated more frequently, then privacy protection is enhanced, but network overhead and processing requirements increase

Engineering Contradiction:
Improveprivacy protectionVSAvoidnetwork overhead
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent employs variable epoch durations that can be adjusted to balance privacy protection and network overhead. The AP can set longer epoch durations during periods of low network activity to reduce rotation frequency and overhead, and shorter epoch durations when enhanced privacy is required. This parameter adjustment allows the system to adapt the rotation frequency to current privacy requirements and network conditions, optimizing the trade-off between privacy enhancement and energy consumption.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20250247691A1Enhanced data privacy management
Publication Date: 2025.07.31 CISCO TECHNOLOGY INC
  • US20250247691A1 patent drawing
  • US20250247691A1 patent drawing
  • US20250247691A1 patent drawing

AI summary

Devices, systems, methods, and processes for facilitating enhanced data privacy (EDP) management are described herein. EDP management for effective obfuscation may be enabled with a wireless AP. The AP transmits wireless frames advertising support for group-based EDP. The AP transmits one or more epoch parameters associated with a plurality of epoch groups. A first epoch parameter comprises epoch timing information and a second epoch parameter indicates a number of wireless stations participating in the corresponding epoch group. The AP further receives a wireless action frame, transmitted by a wireless station, that indicates a first epoch group of the plurality of epoch groups that the STA requests to join. The AP maintains a wireless connection with the wireless station using a plurality of over-the-air (OTA) medium access control (MAC) addresses for the wireless station that are rotated at an epoch interval associated with the first epoch group.