Network access control

Apparatus for controlling access of a communication device to a network, the communication device having a hardware identifier and an associated subscriber identifier, comprising:

• a message interface configured to receive the hardware identifier and the subscriber identifier from the communication device;
• a first processing module configured to determine whether the received hardware identifier and subscriber identifier are associated with one another in a data store;
• a communication module configured to:
• request a security token from the communication device;
• receive a security token from the communication device;
• a second processing module configured to:
• determine whether a received security token matches a security token associated with the received hardware identifier in the data store;
• and
• authorize the communication device to access the network where it is determined that the received security token so matches.

A method of generating a security token comprising:

• receiving, at a processor, a request for a security token;
• determining, at the processor, the identifier of the communication device used to send the request;
• generating, at the processor, a security token;
• associating, by the processor, in a data store the generated security token with the determined identifier of the communication device;
• and
• communicating, by the processor, the security token to the communication device.

A computing device, comprising:

• a processor,
• a memory in communication with the processor, and
• computer executable instructions stored in the memory and executable on the processor to:
• receive a communication device identifier;
• receive an subscriber identifier;
• determine whether the received communication device identifier is associated with the received subscriber identifier in a data store;
• and
• request, where it is determined that the received identifiers are not so associated, a security token associated with the communication device;
• receive a security token;
• determine whether the received security token matches a stored security token associated with the received communication device identifier, and where it is so determined, authorize the communication device to connect to the network.