Privacy control for wireless devices

• US 9,143,931 B2
• Filed: 12/04/2012
• Issued: 09/22/2015
• Est. Priority Date: 09/30/2010
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Diamant, Nimrod, Gordon, David, Getz, Benjamin
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US13/693,612
• Publication Number:
  US 20130094489A1
• Time in Patent Office: 1,022 Days
• Field of Search: 380/258, 380/209, 380/270, 713/160, 726/26, 370/338
• US Class Current: 1/1
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/73 Access point logical identity
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

According to various embodiments, a computer-implemented method is disclosed that includes receiving, at a wireless adaptor of a device, a wireless data packet from an access point (AP), wherein the wireless data packet includes a Basic Service Set Identifier (BSSID) of the AP; changing the BSSID of the received data packet by a processor or hardware to produce a modified wireless data packet; and transmitting the modified wireless data packet to an application on the device.

Claims

1. A device comprising:

a processor in communication with a memory having instructions stored therein which, when executed, cause the processor to;

receive a wireless data packet from an access point (AP), wherein the wireless data packet includes a Basic Service Set Identifier (BSSID) of the AP;

encrypt the BSSID of the received data packet using an encryption key, the encryption key including a public encryption key or a private encryption key, to produce a modified wireless data packet including the encrypted BSSID; and

provide the modified wireless data packet including the encrypted BSSID to an application executing on the device, wherein the BSSID is hidden from the application.

2. The device of claim 1, wherein the instructions stored in the memory, when executed, further cause the processor to receive a seed value or the encryption key from a controller to encrypt the BSSID.

3. The device of claim 2, further comprising the controller, wherein the controller includes a manageability engine.

4. The device of claim 1, wherein the encryption of the BSSID hides an actual BSSID from a software program, an operating system, or both of the device.

5. The device of claim 1, wherein the encryption of the BSSID allows a location derived from an actual BSSID to be hidden from a software program, an operating system, or both of the device.

6. The device of claim 1, wherein the instructions stored in the memory, when executed, further cause the processor to transfer the received BSSID to an authenticated entity in a secured manner, wherein the received BSSID is used to determine a location of the AP and provide a service related to location but prevent the application or an operating system of the device from assessing the received BSSID data and location data.

7. A device comprising:

a processor in communication with a memory having instructions stored therein which, when executed, cause the processor to;

receive, from an application on the device, a wireless data packet including a modified Basic Service Set Identifier (BSSID) of an access point (AP);

decrypt the BSSID using an decryption key, the decryption key including a public decryption key or a private decryption key, to change the modified BSSID of the received wireless data packet to an original BSSID of the AP to produce a unmodified wireless data packet, wherein the original BSSID is hidden from the application; and

transmit the unmodified wireless data packet to the AP.

8. The device of claim 7, wherein the instructions stored in the memory, when executed, further cause the processor to receive the decryption key from a controller to change the BSSID.

9. The device of claim 8, further comprising the controller, wherein the controller includes a manageability engine.

10. The device of claim 7, wherein the instructions stored in the memory, when executed, further cause the processor to receive a seed value from a controller to initiate the decrypting of the BSSID.

11. The device of claim 10, further comprising the controller, wherein the controller includes a manageability engine.

12. A computer-implemented method comprising:

receiving, at a hardware processor of a device, a wireless data packet from an access point (AP), wherein the wireless data packet includes a Basic Service Set Identifier (BSSID) of the AP;

encrypting, at the hardware processor, the BSSID of the received data packet using an encryption key, the encryption key including a public encryption key or a private encryption key, to produce a modified wireless data packet including the encrypted BSSID; and

providing the modified wireless data packet including the encrypted BSSID to an application on the device, wherein the BSSID is hidden from the application.

13. The method of claim 12, further comprising providing the encryption key from a controller of the device to the processor to encrypt the BSSID.

14. The method of claim 12, wherein said encrypting the BSSID separates information derived from an actual BSSID from a software program, an operating system, or both of the device.

15. A non-transitory computer-readable medium holding computer-executable instructions thereon, the computer-executable instructions, when executed by a processor of a device, cause the processor to perform a method, the method comprising:

receiving a wireless data packet from an access point (AP), wherein the wireless data packet includes a Basic Service Set Identifier (BSSID) of the AP;

encrypting the BSSID of the received data packet using an encryption key, the encryption key including a public encryption key or a private encryption key, to produce a modified wireless data packet including the encrypted BSSID; and

providing the modified wireless data packet including the encrypted BSSID to an application on the device, wherein the BSSID is hidden from the application.

16. The medium of claim 15, wherein the method further comprises receiving a seed value or the encryption key from a controller to encrypt the BSSID.

17. The medium of claim 15, wherein said encrypting the BSSID results in hiding an actual BSSID from a software program, an operating system, or both of the device.

18. The medium of claim 15, wherein the method further comprises transferring the received BSSID to an authenticated entity in a secured manner, wherein the received BSSID is used to determine a location of the AP and provide a service related to location but prevent the application or an operating system of the device from assessing the received BSSID data and location data.

19. A non-transitory computer-readable medium holding computer-executable instructions thereon, the computer-executable instructions, when executed by a processor of a device, cause the processor to perform a method, the method comprising:

receiving, from an application on the device, a wireless data packet including a modified a Basic Service Set Identifier (BSSID) of an access point (AP);

decrypting the modified BSSID of the received wireless data packet to an original BSSID of the AP using an decryption key, the decryption key including a public decryption key or a private decryption key, to produce a unmodified wireless data packet, wherein the original BSSID is hidden from the application; and

transmitting the unmodified wireless data packet to the AP.

20. The medium of claim 19, wherein the method further comprises receiving the decryption key from a controller to change the BSSID.

21. The medium of claim 19, wherein the method further comprises receiving a seed value from a controller to initiate the decrypting of the BS.