Wireless Pairing Link Privacy Using Encrypted Device Identity

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The use of fixed MAC addresses for device identification in wireless communication exposes devices to tracking by third parties, and existing encryption methods fail to adequately protect identifying information, allowing devices to be traced through their connections to networks.

Innovation Solution

Implementing encryption methods using a public key of the target device and additional random information to obscure the identifying information, such as MAC addresses or password IDs, ensuring multiple encrypted sets correspond to the same identifying information, and using protocols like SAE or DPP with encrypted connectors to maintain privacy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a fixed MAC address is used for device identification, then device identification is simplified and reliable, but device tracking by third parties becomes possible

Engineering Contradiction:

Improvedevice identification reliabilityVSAvoiddevice tracking

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies dynamics by transitioning from static MAC addresses to dynamic address selection. The device alternates between using a fixed MAC address (for reliability) and random MAC addresses (for privacy protection) based on connection state. During authentication, the fixed MAC is used; during data transmission, random MACs are used to prevent tracking.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent segments the device identification process into distinct phases: authentication phase (using fixed MAC for reliability) and data transmission phase (using random MAC for privacy). This segmentation allows each phase to use the appropriate MAC address type, resolving the contradiction between identification reliability and tracking prevention.

Inventive Principle:

Principle #1Segmentation

2Object-affected harmful factors

If a random MAC address is used to prevent tracking, then device privacy is protected, but authentication protocols like SAE and DPP fail because the AP cannot determine which password or Connector to use

Engineering Contradiction:

Improvedevice tracking preventionVSAvoidauthentication reliability

Core Design Contradiction:

Object-affected harmful factorsVSReliability

Solution Approach 1:

The patent applies preliminary action by performing authentication using the fixed MAC address before switching to random MAC addresses. The AP uses the fixed MAC to identify the device and select the appropriate password or Connector during the authentication phase. Once authentication is complete, the device switches to random MAC addresses for data transmission, maintaining both authentication reliability and tracking prevention.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent uses dynamics by making the MAC address selection adaptive to the connection phase. The system dynamically switches between fixed and random MAC addresses based on whether the device is in authentication mode or data transmission mode, resolving the contradiction between authentication reliability and tracking prevention.

Inventive Principle:

Principle #15Dynamics

3Ease of operation

If identifying information is sent in clear data for authentication, then authentication protocols work correctly, but third parties can track devices through the transmitted identifying information

Engineering Contradiction:

Improveauthentication protocol operationVSAvoiddevice tracking through clear data

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent applies dynamics by changing the MAC address used during data transmission based on the connection phase. During authentication, the fixed MAC is used for ease of operation. During data transmission, random MACs are used to prevent tracking. This dynamic switching resolves the contradiction between authentication ease and tracking prevention.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent uses the fixed MAC address as an intermediary during authentication that enables the AP to identify the device and select the appropriate credentials. After authentication, this intermediary role is replaced by random MAC addresses that provide the same identification function without enabling tracking, thus resolving the contradiction.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12581311B2Method and device to establish a wireless secure link while maintaining privacy against tracking

Publication Date: 2026.03.17 KONINKLIJKE PHILIPS NV

AI summary

This application relates to devices and a method to establish a secure wireless link for communication between a first and a second device over a wireless physical channel, wherein a paring protocol requires sending over the wireless channel identifying information by the first device, the identifying information being data suitable for identifying the device sending the identifying information, or a user thereof, wherein the first device encrypts and transmits the identifying information and random information by using a public key information of the second device. The second device receives the encrypted identifying and random information and, using private key information associated with the public key information, it extracts the identifying information. The devices use a secret uniquely related to the identifying information to derive a session key and then use the session key to establish the secure wireless link.