In a positioning system, a mobile device can detect a transmission from one of a number of lighting devices to obtain an identification (ID) label or code of each lighting device. The mobile device uses the detected ID code for a lookup in a self-stored or remotely stored table that associates lighting device location information with ID codes, to obtain an estimate of mobile device position. To mitigate against hacking by a third party detecting the ID codes and observing locations to compile its own lookup table, the disclosed examples dynamically alter the assignments of particular ID codes to the lighting devices, while minimizing potential disruption of position determination service for mobile devices due to the changes to ID code assignments.