Systems and methods to enable network coordinated MAC randomization for wi-fi privacy

1. A non-transitory computer readable medium including instructions stored thereon, which when executed by one or more processor(s) of an access point, cause a device to perform operations of:

identifying a media access control (MAC) address of a wireless communication station received from the wireless communication station;

determining a first prefix to the MAC address of the wireless communication station based on the MAC address;

determining a second prefix to the MAC address of the wireless communication station based on the first prefix;

identifying a frame received from the wireless communication station, wherein the frame comprises the second prefix and a random MAC address;

replacing, using the second prefix, the random MAC address in the frame with the MAC address of the wireless communication station to generate a processed frame; and

causing to transmit the processed frame to a destination device.

2. The non-transitory computer readable medium of claim 1 , wherein determining the first prefix to the MAC address of the wireless communication station comprises:

causing to transmit to the wireless communication station a plurality of prefixes assigned to the MAC address of the wireless communication station, wherein the first prefix is included in the plurality of prefixes.

3. The non-transitory computer readable medium of claim 1 , wherein determining the first prefix to the MAC address of the wireless communication station comprises:

generating a mapping table in a database;

storing the MAC address of the wireless communication station in the mapping table; and

assigning a plurality of prefixes to the MAC address of the wireless communication station in the mapping table, wherein the plurality of prefixes comprises the second prefix.

4. The non-transitory computer readable medium of claim 3 , wherein replacing the random MAC address in the frame with the MAC address of the wireless communication station comprises:

identifying the second prefix in the frame;

identifying the second prefix in the mapping table based on comparing the second prefix to the plurality of prefixes in the mapping table; and

identifying the MAC address of the wireless communication station in the mapping table using the second prefix in the mapping table.

5. The non-transitory computer readable medium of claim 1 , wherein determining the second prefix to the MAC address of the wireless communication station comprises:

authenticating the wireless communication station using one or more Diffie-Hellman (DH) parameters of at least one of the access point or the wireless communication station.

6. The non-transitory computer readable medium of claim 1 , wherein the frame comprises a prefix portion and a random MAC address portion, wherein the prefix portion comprises the second prefix, a locally-administered bit that indicates whether the random MAC address portion of the frame includes a random MAC address, and a unicast/multicast bit that indicates whether the frame is destined to be transmitted outside of a network domain associated with the access point.

7. The non-transitory computer readable medium of claim 1 , wherein identifying the frame comprises:

receiving a first frame comprising the second prefix and a first random MAC address;

receiving a second frame comprising a second random MAC address different than the first random MAC address; and

determining the first random MAC address and the second random MAC address were generated using the second prefix.

8. An access point, comprising:

one or more processors in communication with a transceiver;

at least one memory that stores computer-executable instructions; and

at least one processor of the one or more processors configured to access the at least one memory, wherein the at least one processor of the one or more processors is configured to execute the computer-executable instructions for:

receiving, from a wireless communication station, a media access control (MAC) address of the wireless communication station;

determining, at the access point, a first prefix to the MAC address of the wireless communication station;

determining a second prefix to the MAC address of the wireless communication station based on the first prefix;

receiving, from the wireless communication station, a frame comprising the second prefix and a random MAC address;

replacing, using the second prefix, the random MAC address in the frame with the MAC address of the wireless communication station, thereby resulting in a processed frame; and

transmitting, at the access point and to a destination device, the processed frame.

9. The access point of claim 8 , wherein determining the second prefix to the MAC address of the wireless communication station comprises:

transmitting to the wireless communication station a plurality of prefixes assigned to the MAC address of the wireless communication station, wherein the second prefix is included in the plurality of prefixes.

10. The access point of claim 8 , wherein determining the second prefix to the MAC address of the wireless communication station comprises:

generating a mapping table in a database;

storing the MAC address of the wireless communication station in the mapping table; and

assigning a plurality of prefixes to the MAC address of the wireless communication station in the mapping table, wherein the plurality of prefixes comprises the second prefix.

11. The access point of claim 10 , wherein replacing the random MAC address in the frame with the MAC address of the wireless communication station comprises:

identifying the second prefix in the frame;

identifying, the second prefix in the mapping table based on comparing the second prefix to the plurality of prefixes in the mapping table; and

identifying the MAC address of the wireless communication station in the mapping table using the second prefix in the mapping table.

12. The access point of claim 8 , wherein determining the second prefix to the MAC address of the wireless communication station comprises:

authenticating the wireless communication station using one or more Diffie-Hellman (DH) parameters of at least one of the access point and the wireless communication station.

13. The access point of claim 8 , wherein the frame comprises a prefix portion and a random MAC address portion, wherein the prefix portion comprises the second prefix, a locally-administered bit that indicates whether the random MAC address portion of the frame includes a random MAC address, and a unicast/multicast bit that indicates whether the frame is destined to be transmitted outside of a network domain associated with the access point.

14. The access point of claim 8 , wherein receiving the frame comprises:

receiving a first frame comprising the second prefix and a first random MAC address;

receiving a second frame comprising a second random MAC address different than the first random MAC address;

determining the first random MAC address and the second random MAC address were generated using the second prefix.