Device-specific authorization at distributed locations

摘要

A method includes receiving authentication information for a client device at a server. The authentication information includes a network address of the client device, a geographic location of the client device, and a first result of a one-way hash function based on a combination of the network address, an authentication seed, and a first secret. The method includes computing, with the server, a second result of the one-way hash function based on a combination of the network address, the authentication seed, and a second secret. The method also includes enabling the client device to access a second network in response to a determination by the server that the first result matches the second result and a determination by the server that the client device is authorized to access the second network based on the geographic location.

主权项

1. A method comprising:
receiving authentication information at a server for a client device coupled to a first network, wherein the authentication information includes a network address of the client device, a geographic location of the client device, and a first result of a one-way hash function based on a combination of the network address, an authentication seed, and a first secret; receiving the authentication seed associated with the client device at the server; retrieving a second secret at the server; computing, with the server, a second result of the one-way hash function based on a combination of the network address, the authentication seed, and the second secret; and in response to a determination by the server that the first result matches the second result and a determination by the server that the client device is authorized to access a second network coupled to the first network based on the geographic location, enabling, via the server, the client device to access the second network, wherein the second network is different from the first network.