The document discusses MAC addresses, their role in device identification and communication, and how MAC randomization enhances user privacy by preventing location tracking. It highlights the introduction of MAC randomization features in recent operating systems like iOS and Android, which enable devices to use randomized MAC addresses for each network. Additionally, it mentions the potential impact on businesses relying on MAC addresses for user authentication and tracking, along with a solution proposed by HSC to bypass MAC-based systems.

1. MAC
RANDOMIZATION

2. MAC ADDRESS
A MAC address is a
unique identity of
the wireless
device
Allows device to
communicate
with other
devices
MAC address
remains unchanged
when moving from one
network to
another
It is used to
identify a
device within a
network
Assigned at the
time of
manufacturing of
the device

3. THE USE OF MAC ADDRESSES
Identifying their repeat guests
and provide an enhanced
guest experience
Permanency attached with MAC help
provide a smooth and
painless WiFi experience
Enterprises can provide automatic
authentication and connections
to WiFi networks
With such systems, guests are
required to register onto the
WiFi networks only once
Empowers businesses for tracking
the end-user movements
within a premise
Helps maintain a historic location data
used to understand guest
behavior and personalized marketing
Most businesses have been using MAC addresses for applications such as

4. THE DISADVANTAGES OF MAC ADDRESSES
Location tracking is a major privacy
concern for portable device users
Applications make use of location
data of the user
Only some operating systems provide
the ability to turn off location services
BUT
Wi-Fi access points can monitor device
locations without user consent by
means of MAC addresses
AS A COUNTERMEASURE TO THIS
PRIVACY THREAT
OS developers are anonymizing MAC
addresses, thereby raising technical
concerns among network operators

5. MAC RANDOMIZATION
It maintains device
anonymity & user privacy
Prevents unwanted history of device activity
from usingMAC addresses
In 2019, Android 10 came with MAC
randomization as default setting
Minimizes privacy concern for
portable device users
It was introduced in 2014
with Apple iOS8
MAC Address Randomization is a feature where the device can use a random MAC
address instead of the real one.

6. MAC RANDOMIZATION
Thanks! Thanks!
Hey there!
Wi-Fi connection
successful.
??? ???
Who are you?
AFTER 24 HOURS
Guests need to re-authenticate their devices after every 24 hours

7. CURRENT DEVELOPMENTS AROUND MAC RANDOMIZATION
IOS 14 ANDROID 11
A new feature called “Private Wi-Fi Address” to further
enhance user privacy protection
For each WiFi SSID, Apple devices will present a distinct
randomized MAC address
The randomized MAC address for each network will not
change over time, not even if you force the device to ‘forget’
the network, and then connect again
‘Private Address’ is switched on as the default in the final
release unless deactivated by the user
Android 11 (Beta 1 version) introduced a new developer
option called “Wi-Fi-enhanced MAC randomization”.
It allows the MAC address to change every time the phone
connects to a Wi-Fi network that has MAC randomization
enabled
In Android 10, MAC randomization is enabled by default for
client mode, SoftAp and Wi-Fi Direct
Randomized MAC addresses are generated per SSID and are
persistent.

8. THE IMPACT OF MAC RANDOMIZATION
Roughly 77% of iPhones and 79%
of iPads are running on the Apple’s
latest major release
Has led to introducing of
additional friction to the guest Wi-Fi
experience
Deeper implications for
Apple devices because
the adoption rate of new iOS
versions very high
79%
77%
Will impact Hotels, Retail
Malls, Restaurants,
Cafes, etc

9. THE SOLUTION TO BY-PASS MAC RANDOMIZATION
HSC’ Next Generation Hotspot Solution is a
Hotspot 2.0 based offering that
bypasses the MAC-based
authentication.
It utilizes a certificate-based authentication
approach to identify and automatically
authenticate a device onto a network.
No reliance on the MAC address or
the randomization attached to it.

10. CONTACT US
info@hsc.com www.hsc.com

11. REFERENCES
▪ https://hsc.com/Blog/Effect-of-Apples-MAC-Randomization-Feature-on-Enterprises
▪ https://www.cablelabs.com/mac-address-randomization-how-user-privacy-impacts-wi-fi-and-internet-service-providers
▪ https://searchsecurity.techtarget.com/tip/MAC-address-randomization-Understanding-the-security-
benefits#:~:text=Privacy%20implications%20of%20MAC%20addresses,and%20perform%20network%20activity%20correlation
▪ https://wifinowglobal.com/news-and-blog/new-test-reveals-how-apples-private-wi-fi-address-feature-will-work/?mc_cid=34298fe8ff&mc_eid=6ea87fe2c8
▪ https://source.android.com/devices/tech/connect/wifi-mac-randomization
▪ https://www.theregister.com/2017/03/10/mac_address_randomization/