Techniques for validating public keys using AAA services

A method for validating a first device, the method comprising:

• receiving, at a second device, first device private key ownership information, a first device public key, and first device identification information from the first device, wherein validation of the first device identification information is required for a security process using a security protocol;
• sending the first device public key and the first device identification information to a second authentication, authorization, and accounting (AAA) server for validation, the second AAA server being separate from the second device;
• receiving a response from the second AAA server, the response including an indication of whether the received first device identification information is validated with stored first device identification information for the first device public key, the stored first device identification information being accessible to the second AAA server;
• if the first device identification information is validated, verifying, at the second device, the first device private key ownership information to determine if the first device is in possession of a first device private key;
• and
• if the first device private key ownership information is verified, performing an action for the security process using the security protocol.

A computer-readable storage medium having one or more instructions stored thereon, the one or more instructions being executable by a processor on a first device to perform a validation process for a second device, the validation process comprising:

• receiving a second device public key, second device private key ownership information, and second device identification information from the second device, wherein validation of the second device identification information is required for a security process using a security protocol;
• sending the public key and the second device identification information to a first authentication, authorization, and accounting (AAA) server for validation of the second device identification information, the AAA server being a separate device from the first device;
• receiving a response from the first AAA server, the response including an indication of whether the second device identification information is validated with stored second device identification information for the second device public key, the stored second device identification information being accessible to the first AAA server;
• if the second device identification is validated, verifying the second device private key ownership information to determine if the second device is in possession of a second device private key;
• and
• if the second device private key ownership information is verified, performing an action for the security process using the security protocol.

A first device configured to perform a validation process for a second device, the first device comprising:

• at least one processor;
• and
• logic encoded in at least one tangible media for execution by the at least one processor, and when executed operable to:
• receive a second device public key, second device private key ownership information, and second device identification information from the second device, wherein validation of the second device identification information is a requirement for a security process using a security protocol;
• send the second device public key and the second device identification information to a first authentication, authorization, and accounting (AAA) server for validation of the second device identification information, the first AAA server being a separate device from the first device;
• receive a response from the first AAA server, the response including an indication of whether the second device identification information is validated with stored second device identification information for the second device public key, the stored second device identification information being accessible to the first AAA server;
• determine whether the second device identification information is validated with the received response;
• upon determining that the received response is validated, verifying the second device private key ownership information to determine that the second device is in possession of a second device private key;
• and
• upon determining that the second device private key ownership is verified, perform an action for the security process using the security protocol.

A method for validating a first device, the method comprising:

• receiving, at a second device, first device private key ownership information, a first device public key, and first device identification information from the first device, wherein validation of the first device identification information is a requirement for a security process using a security protocol;
• sending the first device public key and the first device identification information to a second authentication, authorization, and accounting (AAA) server for the validation, the second AAA server being separate from the second device;
• receiving a response from the second AAA server, the response including an indication of whether the received first device identification information is validated with stored first device identification information for the first device public key, the stored first device identification information being accessible to the second AAA server;
• determining whether the first device identification information is validated with the received response;
• upon determining that the received response is validated, verifying, at the second device, the first device private key ownership information to determine that the first device is in possession of a first device private key;
• and
• upon determining that the first device private key ownership is verified, performing an action for the security process using the security protocol.

A computer-readable storage medium having instructions stored thereon, the instructions being executable by a processor on a first device to perform a validation process for a second device, the validation process comprising:

• receiving a second device public key, second device private key ownership information, and second device identification information from the second device, wherein validation of the second device identification information is a requirement for a security process using a security protocol;
• sending the second device public key and the second device identification information to a first authentication, authorization, and accounting (AAA) server for the validation of the second device identification information, the AAA server being a separate device from the first device;
• receiving a response from the first AAA server, the response including an indication of whether the second device identification information is validated with stored second device identification information for the second device public key, the stored second device identification information being accessible to the first AAA server;
• determining whether the second device identification information is validated with the received response;
• upon determining that the received response is validated, verifying the second device private key ownership information to determine that the second device is in possession of a second device private key;
• and
• upon determining that the second device private key ownership is verified, performing an action for the security process using the security protocol.