Registration and network access control

A network interface device, comprising:

• one or more communication interfaces configured for network and device communication;
• a processor system to implement a device application configured to:
• initiate registration of the network interface device with a device management service to initially configure the network interface device as an interface to a public network for a client device;
• receive an encrypted token directed to the client device from an authentication service that authenticates user credentials received from the client device;
• pass the encrypted token to the client device, the encrypted token redirected to the device management service;
• receive a device management information request directed to the client device from the device management service, the device management information request communicated to the client device;
• receive identification of the network interface device from the client device in response to the device management information request, the identification of the network interface device communicated to the device management service;
• receive encrypted management data directed to the client device from the device management service, the encrypted management data communicated to the client device;
• receive the encrypted token and the encrypted management data from the client device;
• post the encrypted token, the encrypted management data, and the identification of the network interface device to the device management service that registers the network interface device and generates a unique device identifier corresponding to the network interface device;
• and
• receive the unique device identifier for the network interface device from the device management service.

A computer-readable storage memory comprising stored instructions that are executable and, responsive to execution of the instructions by a network interface device, the network interface device performs operations to:

• initiate registration of the network interface device with a device management service to initially configure the network interface device as an interface to a public network for a client device;
• receive an encrypted token directed to the client device from an authentication service that authenticates user credentials received from the client device;
• pass the encrypted token to the client device, the encrypted token redirected to the device management service;
• receive a device management information request directed to the client device from the device management service, the device management information request communicated to the client device;
• receive identification of the network interface device from the client device in response to the device management information request, the identification of the network interface device communicated to the device management service;
• receive encrypted management data directed to the client device from the device management service, the encrypted management data communicated to the client device;
• receive the encrypted token and the encrypted management data from the client device;
• post the encrypted token, the encrypted management data, and the identification of the network interface device to the device management service that registers the network interface device and generates a unique device identifier corresponding to the network interface device;
• and
• receive the unique device identifier for the network interface device from the device management service.