Method and apparatus for securing media access control (MAC) addresses

• US 20060104243A1
• Filed: 10/04/2005
• Published: 05/18/2006
• Est. Priority Date: 11/12/2004
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Park, Soo-hong
• Granted Patent: US 7,319,681 B2
• Time in Patent Office: Days
• US Class Current: 370/331
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

An apparatus and method for securing media access control (MAC) addresses in a wireless local area network (LAN) environment are provided. In the method of securing MAC addresses, a cryptographically generated address (CGA) is generated using a predetermined cipher algorithm, a ciphered MAC address is extracted from the CGA, and communication is performed using the ciphered MAC address. Accordingly, it is possible to strengthen the security of MAC addresses.

Claims

1. A method of securing at least one address, comprising:

generating a ciphered first address using a predetermined cipher algorithm;

extracting a ciphered second address from the ciphered first address; and

communicating using the ciphered second address.

2. The method of claim 1, wherein the predetermined cipher algorithm uses a unidirectional hash function.

3. The method of claim 1, wherein the ciphered first address is an interface identifier of an internet protocol version 6 (IPv6) address, and the ciphered second address is a media access control (MAC) address.

4. The method of claim 1, wherein in the generating of the ciphered first address, the ciphered first address is generated by applying the predetermined cipher algorithm to a plurality of parameters including a subnet prefix and a public key of the internet protocol version 6 (IPv6) address.

5. The method of claim 4, wherein in the extracting of the ciphered second address from the ciphered first address, the ciphered second address is extracted from the ciphered first address whenever the subnet prefix of the IPv6 address changes.

6. The method of claim 3, wherein in the extracting of the ciphered second address from the ciphered first address, part of the interface identifier of the IPv6 address is extracted as the ciphered second address.

7. The method of claim 3, wherein said communicating is performed in a link layer using the MAC address.

8. An apparatus for securing at least one address, comprising:

a first address generation unit, which generates a ciphered first address using a predetermined cipher algorithm;

a second address extraction unit, which extracts a ciphered second address from the first ciphered address; and

a communication unit, which communicates using the ciphered second address.

9. The apparatus of claim 8, wherein the predetermined cipher algorithm uses a unidirectional hash function.

10. The apparatus of claim 8, wherein the ciphered first address is an interface identifier of an internet protocol version 6 (IPv6) address, and the ciphered second address is a media access control (MAC) address.

11. The apparatus of claim 10, wherein the first address generation unit generates the ciphered first address by applying the predetermined cipher algorithm to a plurality of parameters including a subnet prefix and a public key of the internet protocol version 6 (IPv6) address.

12. The apparatus of claim 11, wherein the ciphered second address extraction unit extracts the ciphered second address from the ciphered first address whenever the subnet prefix of the IPv6 address changes.

13. The apparatus of claim 10, wherein the ciphered second address extraction unit extracts part of the interface identifier of the IPv6 address as the ciphered second address.

14. The apparatus of claim 10, wherein the communication unit performs communication in a link layer using the MAC address.

15. A computer-readable recording medium for storing a program enabling a method of securing at least one address, the method comprising:

generating a ciphered first address using a predetermined cipher algorithm;

extracting a ciphered second address from the ciphered first address; and

communicating using the ciphered second address.