Private simultaneous authentication of equals

A system, including one or more devices, comprising:

• a private simultaneous authentication of equals (SAE) based device enrollment system configured to:
• assign a passphrase to an end user device for onboarding the end user device to access network services of a network through a private simultaneous authentication of equals (SAE) scheme;
• store the passphrase at a network side from the end user device in association with an identifier of the end user device;
• a network side private SAE commit engine configured to generate, at the network side, a shared secret as part of a commitment scheme during the private SAE scheme using the passphrase;
• a device identification engine configured to determine an identification of the end user device;
• a device private SAE passphrase association engine configured to:
• associate the passphrase with the identification of the end user device;
• update a private SAE passphrase map to indicate an association between the passphrase and the identification of the end user device, the private SAE passphrase map used to authenticate the end user device to access the network services of the network through the private SAE scheme;
• a network side private SAE confirm engine configured to:
• create, at the network side, a first confirmation value using the shared secret as part of a confirmation scheme during the private SAE scheme;
• receive, at the network side, a second confirmation value from the end user device;
• compare the first confirmation value with the second confirmation value to determine if the end user device possesses the shared secret;
• authenticate the end user device to access the network services of the network through the private SAE scheme, if it is determined that the end user device possesses the shared secret.

A system comprising:

• at least one processor;
• memory storing instructions configured to cause the at least one processor to perform:
• assigning a passphrase to an end user device for onboarding the end user device to access network services of a network through a private simultaneous authentication of equals (SAE) scheme;
• storing the passphrase at a network side from the end user device in association with an identifier of the end user device;
• generating, at the network side, a shared secret as part of a commitment scheme during the private SAE scheme using the passphrase;
• determining an identification of the end user device;
• associating the passphrase with the identification of the end user device;
• updating a private SAE passphrase map to indicate an association between the passphrase and the identification of the end user device;
• creating, at the network side, a first confirmation value using the shared secret as part of a confirmation scheme during the private SAE scheme;
• receiving, at the network side, a second confirmation value from the end user device;
• comparing the first confirmation value with the second confirmation value to determine if the end user device possesses the shared secret;
• authenticating, using the private SAE passphrase map, the end user device to access the network services of the network through the private SAE scheme, if it is determined that the end user device possesses the shared secret.