Wireless MAC Address Mapping for Privacy-Preserving Service Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless networks face challenges in maintaining network services and user privacy due to the rotation of Media Access Control (MAC) addresses by wireless stations, which can disrupt communications and lead to issues like DHCP scope depletion, AAA service overload, and Switch Content Addressable Memory (CAM) table exhaustion.
Innovation Solution
Implementing a method that maintains a mapping between Over-The-Air (OTA) station addresses and infrastructure station addresses, allowing the wireless LAN controller (WLC) to translate and remap addresses during MAC address rotation, ensuring seamless service continuity and privacy by associating weights with common properties to determine similarity scores for address mapping.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If wireless stations rotate MAC addresses to enhance privacy, then user privacy is improved, but network service stability deteriorates due to DHCP scope depletion, AAA service overload, and Switch CAM table exhaustion
Solution Approach 1:
The patent introduces an intermediary mapping mechanism between rotating MAC addresses and stable network service identifiers. The system maintains a mapping table that correlates transient MAC addresses with persistent service identifiers, allowing the network infrastructure to track and manage services regardless of MAC address changes. This intermediary layer decouples the privacy-enhancing MAC rotation from network service stability, enabling both goals to coexist.
Solution Approach 2:
The system performs preliminary actions by pre-establishing mapping relationships between MAC addresses and service identifiers before MAC address rotation occurs. The mapping table is proactively updated and maintained, ensuring that network services can continuously resolve the correct service endpoint even as MAC addresses change. This preliminary mapping prevents service disruptions rather than reacting to them after occurrence.
2Loss of information
If MAC addresses are rotated frequently to maintain privacy, then privacy protection is enhanced, but device complexity increases due to address mapping and translation requirements
Solution Approach 1:
The patent creates a simplified copy or representation of the MAC address mapping relationship through service identifiers. Instead of managing complex direct MAC address mappings, the system uses lightweight service identifier copies that reference the actual MAC addresses. This copying mechanism reduces the complexity of address translation while maintaining the privacy benefits of MAC rotation, as the service identifiers act as simple proxies for the rotating MAC addresses.
3Stability of the object's composition
If infrastructure services maintain stable address mapping, then network service continuity is improved, but adaptability to MAC address rotation deteriorates
Solution Approach 1:
The patent implements a dynamic address mapping system where the mapping table is continuously updated and adapted as MAC addresses rotate. The system dynamically adds new MAC address to service identifier mappings when rotation occurs and removes obsolete mappings. This dynamic adaptation allows the infrastructure to maintain stable service continuity while flexibly accommodating MAC address rotation, resolving the contradiction between stability and adaptability.
Data Source
AI summary
Embodiments identify a station that rotates an over the air station address. As address rotation was not originally designed into wireless networks, the rotation can introduce communication challenges for the station. The embodiments derive that traffic referencing two different over the air station addresses are associated with a single common station. This is accomplished by determining a similarity between properties of two sets of traffic. A first set of traffic references the first over the air station address and a second set of traffic references the second over the air station address. If the properties common across the two sets of traffic indicate sufficient similarity, the embodiments determine that both sets of traffic are associated with a single device. Network configuration of the device is then adjusted based on the determination.