Device address rotation authorization and verification

An apparatus comprising:

• a network interface configured to enable network communications;
• and
• one or more processors coupled to the network interface, the one or more processors configured to perform operations comprising:
• transmitting a registration request associated with the apparatus to an access point, the registration request including a new randomized media access control (MAC) address associated with the apparatus and a first randomly generated number;
• obtaining a message with a second randomly generated number and first integrity information generated based on the first randomly generated number;
• validating the first integrity information with a validation system;
• computing, in response to validating the first integrity information, second integrity information based on the second randomly generated number;
• transmitting the second integrity information to an authorization server for validation of the second integrity information and identification of policies associated with the apparatus;
• and
• obtaining an indication that the apparatus is validated.

A non-transitory computer readable storage medium comprising instructions that when executed configure one or more processors of an end device to perform operations comprising:

• transmitting, by an end device, a registration request associated with the end device to an access point, the registration request including a new randomized media access control (MAC) address associated with the end device and a first randomly generated number;
• obtaining, by the end device, a message with a second randomly generated number and first integrity information generated based on the first randomly generated number;
• validating, by the end device, the first integrity information with a validation system;
• computing, by the end device and in response to validating the first integrity information, second integrity information based on the second randomly generated number;
• transmitting, by the end device, the second integrity information to an authorization server for validation of the second integrity information and identification of policies associated with the end device;
• and
• obtaining, by the end device, an indication that the end device is validated.