Privacy aware DHCP service

摘要

Generally, this disclosure describes a system including a privacy aware DHCP service and a user device. The user device includes a trusted execution environment including a client privacy agent configured to request a first Internet Protocol (IP) address from a DHCP service and to determine a device privacy score based, at least in part, on a DHCP policy; memory comprising secure storage configured to store the first IP address; and communication circuitry configured to establish at least one connection between the user device and at least one entity over a network using the first IP address. The client privacy agent is configured to monitor communication activity over the connection(s), to update the device privacy score based, at least in part, on the communication activity, and to close the connection(s) if the device privacy score is outside an acceptable privacy score range, the acceptable privacy range bounded by a privacy threshold.

主权项

1. A user device comprising:
a trusted execution environment comprising a client privacy agent configured to request a first Internet Protocol (IP) address from a Dynamic Host Configuration Protocol (DHCP) service and to determine a device privacy score based, at least in part, on a DHCP policy of the DHCP service; memory comprising secure storage, the secure storage configured to store the first IP address received from the DHCP service; and communication circuitry configured to establish at least one first connection between the user device and at least one entity over a network using the first IP address, the client privacy agent further configured to monitor communication activity over the at least one first connection, to update the device privacy score based, at least in part, on the communication activity, and to close the at least one first connection if the device privacy score is outside an acceptable privacy score range, the acceptable privacy range bounded by a privacy threshold; wherein said device privacy score is an indicator corresponding to a likelihood that the user device, a user of the user device, or a combination thereof is identifiable; and when said at least one first connection is closed:
the client privacy agent is further configured to, when said at least one first connection is closed, request a second IP address from the DHCP service; andthe communications circuitry is configured to establish at least one second connection between the user device and the at least one entity over the network using the second IP address.