Infrastructure coordinated media access control address assignment

• US 9,584,471 B2
• Filed: 07/06/2015
• Issued: 02/28/2017
• Est. Priority Date: 07/06/2015
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Aruba Networks Incorporated (Hewlett-Packard Enterprise Company)
• Inventors: Raman, Gopalakrishna, Ganu, Sachin, Harkins, Daniel, Siraj, Mohd
• Primary Examiner(s): TON, DANG T
• Application Number:
  US14/792,313
• Publication Number:
  US 20170012935A1
• Time in Patent Office: 603 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
• CPC Class Codes: H04L 61/5061 Pools of addresses
• CPC Class Codes: H04L 61/5092 by self-assignment, e.g. picking addresses at random and testing if they are already in use
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 64/006 with additional information processing, e.g. for direction or speed determination
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

Described herein are systems, devices, techniques and products for managing the dynamic assignment of media access control (MAC) addresses to wireless network devices, such as by identifying a dynamically assigned MAC address before, after, or during a wireless association process and communicating the dynamically assigned MAC address to a wireless network device. Also disclosed are systems, devices, techniques and products for preventing a denial of service attack on a wireless access point'"'"'s association table, such as by requiring devices that associate with a wireless access point to respond to a query from the wireless access point shortly after association.

Claims

1. A system comprising:

one or more processors; and

a non-transitory computer readable storage medium coupled to the one or more processors, wherein the non-transitory computer readable storage medium includes instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including;

receiving, at a network device, a frame, wherein the frame is related to a wireless client device, and wherein the frame includes a media access control (MAC) address corresponding to the wireless client device;

identifying a designated MAC address for use by the wireless client device;

transmitting a response, wherein the response includes the designated MAC address;

receiving an association request, wherein the association request is related to the wireless client device, and wherein the association request includes the designated MAC address;

transmitting an association response, wherein the association response includes an association identifier for the wireless client device; and

updating an association table with an entry for the wireless client device, wherein the entry includes the designated MAC address.

2. The system of claim 1, wherein identifying includes selecting the designated MAC address from a pool of predetermined MAC addresses.

3. The system of claim 1, wherein identifying includes selecting the designated MAC address from a pool of random MAC addresses.

4. The system of claim 1, wherein identifying includes:

transmitting a designated MAC address request, wherein receiving the designated MAC address request at a controller causes the controller to transmit a designated MAC address response including the designated MAC address; and

receiving the designated MAC address.

5. The system of claim 1, wherein identifying includes identifying the MAC address included in the frame as different from a hardware MAC address corresponding to the wireless client device.

6. The system of claim 1, wherein identifying includes identifying the MAC address included in the frame as a locally administered MAC address.

7. The system of claim 1, wherein the operations further include:

determining a characteristic of the wireless client device; and

tracking the wireless client device using the characteristic.

8. The system of claim 7, wherein tracking includes determining a location of the wireless client device.

9. The system of claim 7, wherein tracking includes linking the designated MAC address to the wireless client device, and wherein linking facilitates reidentification of the designated MAC address for use by the wireless client device.

10. The system of claim 1, wherein the operations further include:

determining a characteristic of the wireless client device;

linking the designated MAC address with the characteristic of the wireless client device, wherein linking facilitates identification of the designated MAC address for use by the wireless client device when the wireless client device roams to another network device.

11. The system of claim 1, wherein identifying the designated MAC address includes:

determining a characteristic of the wireless client device; and

identifying the designated MAC address using the characteristic of the wireless client device.

12. The system of claim 1, wherein the operations further include:

transmitting an indicator of an availability of designated MAC addresses.

13. The system of claim 12, wherein receiving the indicator at a wireless client device facilitates the wireless client device transmitting a request for a MAC address.

14. The system of claim 12, wherein transmitting the indicator includes transmitting a beacon frame or a probe response frame, and wherein the beacon frame or probe response frame includes the indicator.

15. The system of claim 14, wherein a service set identifier (SSID) of the beacon frame or probe response frame includes the indicator.

16. The system of claim 14, wherein a vendor specific element of the beacon frame or probe response frame includes the indicator.

17. The system of claim 1, wherein the operations further include:

transmitting a captive portal website, wherein the captive portal website requests input authorizing use of a designated MAC address; and

receiving input corresponding to an authorization to use the designated MAC address.

18. The system of claim 1, wherein the operations further include:

transmitting an association query, wherein the association query includes the designated MAC address, and wherein receiving the association query at the wireless client device causes the wireless client device to transmit a response to the association query;

monitoring for a response to the association query for a predetermined time period;

determining that a response to the association query is not received during the predetermined time period; and

updating the association table to remove the entry for the wireless client device.

19. A computer implemented method, comprising:

receiving, at a network device, a frame, wherein the frame is related to a wireless client device, and wherein the frame includes a media access control (MAC) address corresponding to the wireless client device;

identifying a designated MAC address for use by the wireless client device;

transmitting a response, wherein the response includes the designated MAC address;

receiving an association request, wherein the association request is related to the wireless client device, and wherein the association request includes the designated MAC address;

transmitting an association response, wherein the association response includes an association identifier for the wireless client device; and

updating an association table with an entry for the wireless client device, wherein the entry includes the designated MAC address.

20. A non-transitory computer readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:

receiving, at a network device, a frame, wherein the frame is related to a wireless client device, and wherein the frame includes a media access control (MAC) address corresponding to the wireless client device;

identifying a designated MAC address for use by the wireless client device;

transmitting a response, wherein the response includes the designated MAC address;

receiving an association request, wherein the association request is related to the wireless client device, and wherein the association request includes the designated MAC address;

transmitting an association response, wherein the association response includes an association identifier for the wireless client device; and

updating an association table with an entry for the wireless client device, wherein the entry includes the designated MAC address.