WLAN Private Identifier Exchange for Consistent Device Recognition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing use of randomized MAC addresses in wireless devices poses challenges for WLAN infrastructure, as it complicates the recognition of stations, leading to a perceived loss of utility and privacy concerns for users who must frequently log in, especially in environments where consistent identification is desired for features like parental controls.
Innovation Solution
An access point communicates the types of unique identifiers it supports, allowing stations to respond appropriately, and facilitates a secure exchange of unique identifiers through action frames, enabling consistent identification and authorization based on the type and length of identifiers provided.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If randomized MAC addresses are used for privacy protection, then user privacy is improved, but network recognition and consistent identification deteriorate
Solution Approach 1:
The identification system is segmented into two distinct parts: randomized MAC addresses for general network communication and privacy protection, and persistent unique identifiers (such as device IDs or hashed identifiers) for maintaining consistent recognition across sessions. This segmentation allows each identifier type to serve its specific purpose without interfering with the other, resolving the contradiction between privacy and recognition.
Solution Approach 2:
A persistent unique identifier acts as an intermediary between the randomized MAC address and the network infrastructure. Instead of relying solely on the changing MAC address for recognition, the network uses this intermediary identifier to maintain consistent device identification across different sessions while preserving the privacy benefits of MAC randomization.
2Adaptability or versatility
If persistent unique identifiers are collected for network recognition, then consistent identification is improved, but user privacy control deteriorates
Solution Approach 1:
The system dynamically adjusts identifier collection and usage based on network type and user context. In public networks, the system may collect persistent identifiers for basic functionality, while in private networks or when users prioritize privacy, the system adapts to use alternative identification methods. This dynamic behavior allows the system to maintain device recognition capabilities while respecting varying privacy control requirements.
3Object-affected harmful factors
If randomized MAC addresses change frequently, then privacy protection is improved, but network utility and feature availability deteriorate
Solution Approach 1:
The system performs preliminary actions by establishing persistent identifier exchange during the initial network association phase. This preliminary action ensures that both the device and network have the necessary identifiers configured before features need to be accessed, eliminating the need for repeated re-authentication and ensuring continuous feature availability without compromising privacy through frequent MAC changes.
Data Source
AI summary
Methods, systems, and computer readable media can be operable to facilitate an exchange of messages between an access point and a station, wherein the access point requests a unique identifier that meet certain requirements of a unique identifier configuration from the station. The station initiates a secure connection with the access point prior to associating with the access point. The station may either respond with a message declining to provide a unique identifier or respond with a message including a unique identifier, along with a response unique identifier configuration, to be used by the access point for the station via the secure connection. The response from the station may include additional limitations on the use of the unique identifier by the access point. The access point may enforce different policies against the station depending upon how the station responds to the unique identifier request.