Wireless MAC Address Mapping for Privacy and Service Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless networks face challenges in maintaining network services and security when stations modify their media access control (MAC) addresses, leading to disruptions such as DHCP scope depletion, AAA service overload, and CAM table exhaustion, while also exposing user movement patterns.
Innovation Solution
Implement a wireless LAN controller (WLC) that maintains a mapping between over-the-air (OTA) MAC addresses and infrastructure MAC addresses, adjusting this mapping when stations rotate their MAC addresses to ensure continuous network services and privacy by using similarity-based determinations of station reuse and infrastructure address stability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If stations use rotating MAC addresses to protect user privacy and movement patterns, then user privacy is improved, but network service continuity deteriorates due to DHCP scope depletion, AAA service overload, and CAM table exhaustion
Solution Approach 1:
The patent introduces an intermediary mapping mechanism between rotating station MAC addresses and stable infrastructure MAC addresses. The access point maintains a mapping table that translates between these address spaces, allowing the network infrastructure to recognize stations consistently even as their MAC addresses rotate. This intermediary mapping layer resolves the contradiction by decoupling the privacy-protecting address rotation from the service-continuity requirement.
Solution Approach 2:
The system performs preliminary actions by pre-establishing the mapping relationship between rotating station MAC addresses and stable infrastructure MAC addresses before service disruptions occur. The access point proactively maintains and updates this mapping table, ensuring that DHCP, AAA, and other network services can continue without interruption despite MAC address rotation. This preliminary mapping action prevents the harmful effects of address rotation on network services.
2Reliability
If stations maintain common station addresses across locations, then network service continuity is improved, but user movement patterns are exposed to nefarious actors
Solution Approach 1:
The patent segments the MAC address functionality into two distinct roles: rotating station MAC addresses for wireless communication (providing privacy) and stable infrastructure MAC addresses for network service identification (providing continuity). This segmentation allows each address type to fulfill its specific function without compromising the other, resolving the contradiction between privacy protection and service continuity.
Solution Approach 2:
The infrastructure MAC address acts as an intermediary identifier that bridges the gap between rotating station addresses and network services. While station MAC addresses rotate for privacy, the infrastructure MAC address remains stable and serves as the consistent identifier for network services, authentication, and DHCP. This intermediary layer maintains service continuity without exposing movement patterns.
3Reliability
If access points translate between station MAC addresses and infrastructure MAC addresses, then network service continuity is improved, but device complexity increases
Solution Approach 1:
The access point performs self-service by automatically maintaining and updating its own MAC address mapping table without requiring external intervention. When a station associates or reassociates with a different MAC address, the access point autonomously updates the mapping between the rotating station MAC address and the stable infrastructure MAC address. This self-service capability reduces the operational complexity despite the added functional complexity of address translation.
Data Source
AI summary
Embodiments identify a station that rotates an over the air station address. As address rotation was not originally designed into wireless networks, the rotation can introduce communication challenges for the station. The embodiments derive that traffic referencing two different over the air station addresses are associated with a single common station. This is accomplished by determining a similarity between properties of two sets of traffic. A first set of traffic references the first over the air station address and a second set of traffic references the second over the air station address. If the properties common across the two sets of traffic indicate sufficient similarity, the embodiments determine that both sets of traffic are associated with a single device. Network configuration of the device is then adjusted based on the determination.