Media Access Control (MAC) randomized bonjour servers identification and policy application
A device may obtain a username upon authentication of the device. The username of the device may be associated with the device's MAC address, and used with any other identifier of the device, including a service identifier provided to the device by a service system (e.g., AirGroup), to generate a unique identifier of the device. The unique identifier of the device may maintain the device's properties and various identifications (e.g., MAC address, username, service identification, etc.). The unique identifier of the device may be used to properly identify the device by utilizing the device's properties and various identifications, and used to establish connections with other devices. In this way, a device supporting MAC randomization may be properly identified by verifying the device's properties and other identifications with a list of stored unique identifiers of devices, allowing the device to maintain established connections with other devices without the performance of reauthentication.
1 . A computer-implemented method performed by an access point (AP), the method comprising:
retrieving a MAC address, a username, and a service identifier of a device, wherein the service identifier is obtained from an advertisement packet sent from a Multicast Domain Name System (mDNS) server;
generating a unique identifier of the device based on the username, the MAC address and the service identifier;
retrieving a connectivity list of a plurality of devices comprising the unique identifier of the device;
determining the device receives a new MAC address according to the username and the service identifier of the device;
updating the MAC address of the device with the new MAC address of the device; and
updating the unique identifier of the device according to the new MAC address.
2 . The computer-implemented method of claim 1 , further comprising:
receiving a connection with the device;
obtaining a pre-shared key and the MAC address of the device;
sending the pre-shared key and the MAC address of the device to an authentication server;
receiving the username of the device upon validation of the pre-shared key;
associating the username to the MAC address of the device; and
storing the username and the MAC address of the device.
3 . The computer-implemented method of claim 1 , further comprising:
updating the connectivity list of the plurality of devices with the updated unique identifier of the device.
4 . The computer-implemented method of claim 1 , further comprising:
publishing the unique identifier of the device to a mDNS server and a service on the AP to use the unique identifier to identify the device; and
publishing the updated unique identifier to the mDNS server and the service to replace the unique identifier.
5 . The computer-implemented method of claim 4 , wherein the service comprises AirGroup.
6 . The computer-implemented method of claim 1 , wherein the device receives the new MAC address by performing MAC randomization to maintain anonymity.
7 . The computer-implemented method of claim 1 , wherein the generating the unique identifier of the device comprises:
verifying the device based on the username, the MAC address and the service identifier to determine if the unique identifier of the device is pre-existing and stored in a database;
in response to determining the unique identifier is pre-existing, retrieving the unique identifier from the database; and
in response to determining the unique identifier is not pre-existing, generating the unique identifier of the device based on the username, the MAC address and the service identifier.
8 . A computing system comprising:
one or more processors; and
a memory storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving an advertisement packet from a Multicast Domain Name System (mDNS) server;
obtaining a service identifier of a device from the advertisement packet;
retrieving a MAC address and username of the device;
generating a unique identifier of the device based on the username, the MAC address and the service identifier;
retrieving a connectivity list of a plurality of devices comprising the unique identifier of the device;
determining the device receives a new MAC address according to the username and the service identifier of the device;
updating the MAC address of the device with the new MAC address of the device; and
updating the unique identifier of the device according to the new MAC address.
9 . The computing system of claim 8 , wherein the instructions further cause the one or more processors to perform operations comprising:
receiving a connection with the device;
obtaining a pre-shared key and the MAC address of the device;
sending the pre-shared key and the MAC address of the device to an authentication server;
receiving the username of the device upon validation of the pre-shared key;
associating the username to the MAC address of the device; and
storing the username and the MAC address of the device.
10 . The computing system of claim 8 , wherein the instructions further cause the one or more processors to perform operations comprising:
publishing the unique identifier of the device to the mDNS server and a service on the AP to use the unique identifier to identify the device; and
publishing the updated unique identifier to the mDNS server and the service to replace the unique identifier, wherein the service comprises AirGroup.
11 . The computing system of claim 8 , wherein the device receives the new MAC address by performing MAC randomization to maintain anonymity.
12 . The computing system of claim 8 , further comprising:
updating the connectivity list of the plurality of devices with the updated unique identifier of the device.
13 . The computing system of claim 8 , wherein the generating the unique identifier of the device comprises:
verifying the device based on the username, the MAC address and the service identifier to determine if the unique identifier of the device is pre-existing and stored in a database;
in response to determining the unique identifier is pre-existing, retrieving the unique identifier from the database; and
in response to determining the unique identifier is not pre-existing, generating the unique identifier of the device based on the username, the MAC address and the service identifier.
14 . A non-transitory storage medium storing instructions that, when executed by at least one processor, cause the at least one processor to perform operations comprising:
retrieving a MAC address, a username, and a service identifier of a device, wherein the service identifier is obtained from an advertisement packet sent from a Multicast Domain Name System (mDNS) server;
generating a unique identifier of the device based on the username, the MAC address and a service identifier;
retrieving a connectivity list of a plurality of devices comprising the unique identifier of the device;
determining the device receives a new MAC address according to the username and the service identifier of the device;
updating the MAC address of the device with the new MAC address of the device;
updating the unique identifier of the device according to the new MAC address; and
updating the connectivity list of the plurality of devices with the updated unique identifier of the device.
15 . The non-transitory storage medium of claim 14 , wherein the instructions further cause the at least one processor to perform operations comprising:
receiving a connection with the device;
obtaining a pre-shared key and the MAC address of the device;
sending the pre-shared key and the MAC address of the device to an authentication server;
receiving the username of the device upon validation of the pre-shared key;
associating the username to the MAC address of the device; and
storing the username and the MAC address of the device.
16 . The non-transitory storage medium of claim 14 , wherein the instructions further cause the at least one processor to perform operations comprising:
publishing the unique identifier of the device to the mDNS server and a service on the AP to use the unique identifier to identify the device; and
publishing the updated unique identifier to the mDNS server and the service to replace the unique identifier, wherein the service comprises AirGroup.
17 . The non-transitory storage medium of claim 14 , wherein the generating the unique identifier of the device comprises:
verifying the device based on the username, the MAC address and the service identifier to determine if the unique identifier of the device is pre-existing and stored in a database;
in response to determining the unique identifier is pre-existing, retrieving the unique identifier from the database; and
in response to determining the unique identifier is not pre-existing, generating the unique identifier of the device based on the username, the MAC address and the service identifier.
18 . The non-transitory storage medium of claim 14 , wherein the device receives the new MAC address by performing MAC randomization to maintain anonymity.