[STDS-802-Privacy] Random addresses and P2P relationships
On November 26, 2014 3:52 PM Paul Lambert wrote:
> Note - devices should maintain relationships based on “Id” not MAC E.g.
> Id_i = H(csi, P_i)[0:16]
Maybe. But if we consider "device pairing," we have to consider what kind of secret is already exchanged during the pairing. We also have to see what kind of identities can be disclosed or not during "peer-to-peer" discovery protocols. One possibility for example is to assume that a secret "s_ab" is exchanged during the establishment of the relationship between two devices A and B, and to use that secret to "blind" the discovery request.
For example, the discovery request could include an information element of the form < nonce, H(nonce, s_ab) >. Devices process the request by looking at their list of established relationships, to see whether one matches. If there is a match, they can try to establish a connection.
-- Christian Huitema