Configuration and authentication of wireless devices

A wireless device comprising:

• a transceiver;
• a processor;
• and
• a memory storing instructions that when executed by the processor cause the wireless device to:
• authenticate, at a certification authority, a client device based, at least in part, on a public root identity key of the client device;
• receive, at the certification authority, a public transient identity key and a connection attribute of the client device;
• certify the public transient identity key and the connection attribute with a private certification authority key;
• and
• transmit the certified public transient identity key and the certified connection attribute to the client device.

A wireless device comprising:

• means for authenticating a client device based, at least in part, on a public root identity key of the client device;
• means for receiving a public transient identity key and a connection attribute of the client device;
• means for certifying the public transient identity key and the connection attribute with a private certification authority key;
• and
• means for transmitting the certified public transient identity key and the certified connection attribute to the client device.

A non-transitory computer-readable medium storing instructions that, when executed by a processor of a wireless device, cause the wireless device to:

• authenticate, at a certification authority, a client device based, at least in part, on a public root identity key of the client device;
• receive, at the certification authority, a public transient identity key and a connection attribute of the client device;
• certify the public transient identity key and the connection attribute with a private certification authority key;
• and
• transmit the certified public transient identity key and the certified connection attribute to the client device.

A method of establishing a communication link to a first wireless device, the method comprising:

• transmitting a certificate identifier associated with a second wireless device to a certification status responder;
• receiving a status of a certificate corresponding to the certificate identifier from the certification status responder;
• and
• establishing the communication link based, at least in part, on the status of the certificate.