System, apparatus and method for generating dynamic IPV6 addresses for secure authentication

An apparatus for authenticating a device for network communication, comprising:

• a processor;
• a memory, operatively coupled to the processor;
• and
• a communication interface, operatively coupled to the processor and configured to communicate to a network,
• wherein the processor is configured to obtain identification data in the device, wherein the identification data is configured as a hash of a public key for identifying at least one of the device and/or a user associated with the device,
• wherein the processor is configured to generate an Internet Protocol (IP) message in the device, wherein an IP source address of the IP message comprises the identification data, and wherein the processor is configured to transmit the IP message and the public key to the communication interface for registering the device,
• the processor being further configured to generate and transmit, via the communication interface a second IP message after transmitting the IP message, wherein an IP source address of the second IP message comprises the identification data,
• the communication interface being configured to receive a challenge in response to the second IP message, wherein the challenge is based at least in part on the identification data, and
• wherein the processor is configured to transmit response data via the communication interface in response to the challenge for authenticating the device for secure network communication.

A method for authenticating a device for network communication, comprising:

• receiving an Internet Protocol (IP) message, wherein the IP message comprises device identification data in an IP source address, the identification data comprising a hash of a public key for identifying at least one of the device and/or a user associated with the device;
• registering the device in response to receiving the IP message, and storing a public key and routing prefix associated with the device;
• receiving a second IP message after registering the device, wherein the second IP message comprises the identification data in a second IP source address;
• selecting a challenge for the device in response to the second IP message, wherein the challenge is based at least in part on the identification data;
• and
• receiving response data from the device in response to the challenge for authenticating the device for secure network communication.

A non-transitory machine readable storage medium having stored thereon a computer program for authenticating a device for network communication, the computer program comprising a routine of set instructions for causing the machine to perform the steps of:

• obtaining identification data in the device, wherein the identification data is configured as a hash of a public key for identifying at least one of the device and/or a user associated with the device;
• generating an Internet Protocol (IP) message in the device, wherein the IP message comprises the identification data;
• registering the device by transmitting the IP message;
• generating and transmitting a second IP message after registering the device, wherein the second IP message comprises the identification data;
• receiving a challenge in the device in response to the second IP message, wherein the challenge is based at least in part on the identification data;
• and
• transmitting response data from the device in response to the challenge for authenticating the device for network communication.