Single authentication portal for diverse industrial network protocols across multiple OSI layers

One or more non-transitory computer-readable storage media storing one or more sequences of program instructions which, when executed by one or more computing devices, cause performing:

• using a gateway device, receiving an authentication request from a client device;
• using the gateway device, in response to receiving the authentication request from the client device, performing one or more authentication services for the client device on behalf of a server device that is separate from the gateway device, by using identity information that is stored in a first data repository;
• using the gateway device, generating, based on data from an access control list maintained at the server device, a list of one or more enterprise devices;
• using the gateway device, receiving an access request from the client device to access an enterprise device in the list of one or more enterprise devices;
• using the gateway device, generating service identity information for authenticating the gateway device to the enterprise device and storing the service identity information in a second data repository;
• in response to receiving the access request, using the gateway device, performing one or more authentication services for authenticating the gateway device to the enterprise device on behalf of the client device by using the service identity information that is stored in the second data repository, wherein the service identity information comprises rotating credentials for authenticating the gateway device to the enterprise device;
• and
• in response to properly authenticating the gateway device to the enterprise device, allowing the client device to access the enterprise device;
• in response to not properly authenticating the gateway device to the enterprise device, indicating the enterprise device as compromised.

A computer system comprising:

• one or more processors;
• a computer-readable storage media coupled to the one or more processors;
• a memory coupled to the computer-readable storage media and storing instructions which, when executed, cause the one or more processors to:
• receive an authentication request from a client device;
• in response to receiving the authentication request from the client device, perform one or more authentication services for the client device on behalf of a server device that is separate from the computer system, by using identity information that is stored in a first data repository;
• generate, based on data from an access control list maintained at the server device, a list of one or more enterprise devices;
• receive an access request from client device to access an enterprise device in the list of one or more enterprise devices;
• generate service identity information for authenticating a gateway device to the enterprise device and store the service identity information in a second data repository;
• in response to receiving the access request, perform one or more authentication services for authenticating the gateway device to the enterprise device on behalf of the client device by using the service identity information that is stored in the second data repository, wherein the service identity information comprises rotating credentials for authenticating the gateway device to the enterprise device;
• and
• in response to properly authenticating the gateway device to the enterprise device, allow the client device to access the enterprise device:
• in response to not properly authenticating the gateway device to the enterprise device, indicate the enterprise device as compromised.

A computer-implemented method, comprising:

• using a network device, receiving an authentication request from a client device;
• using the network device, in response to receiving the authentication request from the client device, performing one or more authentication services for the client device on behalf of a server device that is separate from the network device, by using identity information that is stored in a first data repository;
• and
• using the network device, generating, based on data from an access control list maintained at the server device, a list of one or more enterprise devices;
• using the network device, receiving an access request from the client device to access an enterprise device in the list of one or more enterprise devices;
• using the network device, performing one or more authentication services for authenticating the network device on behalf of the client device by using service identity information that is stored in a second data repository to authenticate the network device to the enterprise device, wherein the service identity information comprises rotating credentials for authenticating the network device to the enterprise device;
• and
• in response to properly authenticating the network device to the enterprise device, allowing the client device to access the enterprise device;
• in response to not properly authenticating the network device to the enterprise device, marking the enterprise device as compromised.