Protected pre-association device identification
Methods, systems, and computer readable media can be operable to facilitate an exchange of messages between an access point and a station, wherein the access point requests a unique identifier from the station. The station initiates a secure connection with the access point prior to associating with the access point. The station may either respond with a message declining to provide a unique identifier or respond with a message including a unique identifier to be used by the access point for the station via the secure connection. The response from the station may include additional limitations on the use of the unique identifier by the access point. The access point may enforce different policies against the station depending upon how the station responds to the unique identifier request.
1. A method for an access point to provide one or more features to a station, the method comprising:
outputting a unique identifier request to the station prior to associating with the station, wherein the unique identifier request includes a request that the station respond with a unique identifier that is to be used by the access point for the station;
establishing a secure connection with the station;
receiving a unique identifier response from the station via the secure connection;
determining that the station supports creating and delivering the unique identifier based on an indication provided within the unique identifier response;
determining that the unique identifier response provides the unique identifier to be used for the station, wherein the unique identifier is different from a media access control (MAC) address of the station; and
providing access to the one or more features to the station based on the unique identifier received in the unique identifier response.
2. The method of claim 1 , wherein establishing the secure connection with the station comprises exchanging one or more encryption keys with the station.
3. The method of claim 1 , wherein establishing the secure connection comprises a pre-association security negotiation.
4. The method of claim 1 , wherein the unique identifier comprises any of a universal unique identifier, a random number, a pseudorandom number, a preconfigured identifier, or any combination thereof.
5. The method of claim 1 , further comprising:
associating the station with the access point.
6. The method of claim 5 , further comprising:
after associating the station with the access point, providing to the station network information specifying a network or network access for the station.
7. The method of claim 1 , wherein providing access to the one or more features to the station based on the unique identifier received in the unique identifier response comprises providing one or more benefits associated with a retail business or an online business.
8. An access point for providing access to one or more features to a station, the access point comprising:
a memory storing one or more computer-readable instructions; and
a processor configured to execute the one or more computer-readable instructions to:
output a unique identifier request to the station prior to associating with the station, wherein the unique identifier request includes a request that the station respond with a unique identifier that is to be used by the access point for the station;
establish a secure connection with the station;
receive a unique identifier response from the station via the secure connection;
determine that the station supports creating and delivering the unique identifier based on an indication provided within the unique identifier response;
determine that the unique identifier response provides the unique identifier to be used for the station, wherein the unique identifier is different from a media access control (MAC) address of the station; and
provide access to the one or more features to the station based on the unique identifier received in the unique identifier response.
9. The access point of claim 8 , wherein establishing the secure connection with the station comprises exchanging one or more encryption keys with the station.
10. The access point of claim 8 , wherein establishing the secure connection comprises a pre-association security negotiation.
11. The access point of claim 8 , wherein the unique identifier comprises any of a universal unique identifier, a random number, a pseudorandom number, a preconfigured identifier, or any combination thereof.
12. The access point of claim 1 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
associate the station with the access point.
13. The access point of claim 12 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
after associating the station with the access point, provide to the station network information specifying a network or network access for the station.
14. The access point of claim 1 , wherein providing access to the one or more features to the station based on the unique identifier received in the unique identifier response comprise providing one or more benefits associated with a retail business or an online business.
15. A non-transitory computer-readable medium of an access point storing one or more computer-readable instructions for providing access to one or more features to a station, the one or more computer-readable instructions that when executed by a processor of the access point cause the access point to perform one or more operations comprising:
outputting a unique identifier request to the station prior to associating with the station, wherein the unique identifier request includes a request that the station respond with a unique identifier that is to be used by the access point for the station;
establishing a secure connection with the station;
receiving a unique identifier response from the station via the secure connection;
determining that the station supports creating and delivering the unique identifier based on an indication provided within the unique identifier response;
determining that the unique identifier response provides the unique identifier to be used for the station, wherein the unique identifier is different from a media access control (MAC) address of the station; and
providing access to the one or more features to the station based on the unique identifier received in the unique identifier response.
16. The non-transitory computer-readable medium of claim 15 , wherein establishing the secure connection comprises at least one of exchanging one or more encryption keys with the station or a pre-association security negotiation.
17. The non-transitory computer-readable medium of claim 15 , wherein the unique identifier comprises any of a universal unique identifier, a random number, a pseudorandom number, a preconfigured identifier, or any combination thereof.
18. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
associating the station with the access point.
19. The non-transitory computer-readable medium of claim 18 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
after associating the station with the access point, providing to the station network information specifying a network or network access for the station.
20. The non-transitory computer-readable medium of claim 15 , wherein providing access to the one or more features to the station based on the unique identifier received in the unique identifier response comprise providing one or more benefits associated with a retail business or an online business.