Multifactor Authentication for Internet-of-Things Devices

Abstract

Concepts and technologies are disclosed herein for multifactor authentication for Internet-of-things devices. An access request can be received from an Internet-of-things device. The access request can include identifying information associated with the Internet-of-things device and a certificate. The certificate can be validated and a stored version of the identifying information can be obtained. If the stored version of the identifying information is determined to match the identifying information included with the access request, access to a resource can be allowed.

1 . A system comprising:
 a processor; and   a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising
 detecting a registration request by which an Internet-of-things device requests registration of the Internet-of-things device for multifactor authentication, 
 in response to detecting the registration request, requesting an IP address from a gateway to which the Internet-of-things device is connected, wherein the gateway assigns the IP address to the Internet-of-things device, 
 obtaining the IP address from the gateway, 
 storing the IP address, wherein the IP address is associated with the Internet-of-things device, and 
 requesting issuance, to the Internet-of-things device, of a certificate to be used by the Internet-of-things device for the multifactor authentication. 
   
     
     
         2 . The system of  claim 1 , wherein the registration request is generated by the Internet-of-things device in response to activation of the Internet-of-things device, and wherein the registration request is received from the Internet-of-things device. 
     
     
         3 . The system of  claim 1 , wherein requesting issuance of the certificate to be used by the Internet-of-things device for the multifactor authentication comprises:
 sending a certificate request to a certificate authority, wherein the certificate authority delivers the certificate to the Internet-of-things device via an over-the-air channel between the certificate authority and the Internet-of-things device.   
     
     
         4 . The system of  claim 3 , wherein the over-the-air channel is used to deliver updates to the Internet-of-things device and is not established by the certificate authority for purposes of delivering the certificate. 
     
     
         5 . The system of  claim 1 , wherein the multifactor authentication comprises authenticating based on the IP address and the certificate, and wherein the multifactor authentication is provided by
 receiving, from a third party device, a validation request, wherein the validation request comprises a copy of the certificate and data that indicates the IP address of the Internet-of-things device;   validating the certificate and the IP address; and   responding to the validation request based on results of the validating.   
     
     
         6 . The system of  claim 5 , wherein validating the certificate comprises communicating with a certificate authority that issued the certificate to validate the certificate received by the third party device, and wherein validating the IP address comprises comparing the IP address received from the third party device to a stored IP address that is stored for the Internet-of-things device. 
     
     
         7 . The system of  claim 1 , wherein the multifactor authentication of the Internet-of-things device is accomplished automatically and without interaction by a user of the Internet-of-things device. 
     
     
         8 . A method comprising:
 detecting, at a computing device comprising a processor, a registration request by which an Internet-of-things device requests registration of the Internet-of-things device for multifactor authentication;   in response to detecting the registration request, requesting, by the computing device, an IP address from a gateway to which the Internet-of-things device is connected, wherein the gateway assigns the IP address to the Internet-of-things device;   obtaining, by the computing device, the IP address from the gateway;   storing, by the computing device, the IP address, wherein the IP address is associated with the Internet-of-things device; and   requesting, by the computing device, issuance of a certificate to be used by the Internet-of-things device for the multifactor authentication to the Internet-of-things device.   
     
     
         9 . The method of  claim 8 , wherein the registration request is generated by the Internet-of-things device in response to activation of the Internet-of-things device, and wherein the registration request is received from the Internet-of-things device. 
     
     
         10 . The method of  claim 8 , wherein requesting issuance of the certificate to be used by the Internet-of-things device for the multifactor authentication comprises:
 sending a certificate request to a certificate authority, wherein the certificate authority delivers the certificate to the Internet-of-things device via an over-the-air channel between the certificate authority and the Internet-of-things device.   
     
     
         11 . The method of  claim 10 , wherein the over-the-air channel is used to deliver updates to the Internet-of-things device and is not established by the certificate authority for purposes of delivering the certificate. 
     
     
         12 . The method of  claim 8 , wherein the multifactor authentication comprises authenticating based on the IP address and the certificate, and wherein the multifactor authentication is provided by
 receiving, from a third party device, a validation request, wherein the validation request comprises a copy of the certificate and data that indicates the IP address of the Internet-of-things device;   validating the certificate and the IP address; and   responding to the validation request based on results of the validating.   
     
     
         13 . The method of  claim 12 , wherein validating the certificate comprises communicating with a certificate authority that issued the certificate to validate the certificate received by the third party device, and wherein validating the IP address comprises comparing the IP address received from the third party device to a stored IP address that is stored for the Internet-of-things device. 
     
     
         14 . The method of  claim 8 , wherein the multifactor authentication of the Internet-of-things device is accomplished automatically and without interaction by a user of the Internet-of-things device. 
     
     
         15 . A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:
 detecting a registration request by which an Internet-of-things device requests registration of the Internet-of-things device for multifactor authentication;   in response to detecting the registration request, requesting an IP address from a gateway to which the Internet-of-things device is connected, wherein the gateway assigns the IP address to the Internet-of-things device;   obtaining the IP address from the gateway;   storing the IP address, wherein the IP address is associated with the Internet-of-things device; and   requesting issuance, to the Internet-of-things device, of a certificate to be used by the Internet-of-things device for the multifactor authentication.   
     
     
         16 . The computer storage medium of  claim 15 , wherein the registration request is generated by the Internet-of-things device in response to activation of the Internet-of-things device, and wherein the registration request is received from the Internet-of-things device. 
     
     
         17 . The computer storage medium of  claim 15 , wherein requesting issuance of the certificate to be used by the Internet-of-things device for the multifactor authentication comprises:
 sending a certificate request to a certificate authority, wherein the certificate authority delivers the certificate to the Internet-of-things device via an over-the-air channel between the certificate authority and the Internet-of-things device.   
     
     
         18 . The computer storage medium of  claim 17 , wherein the over-the-air channel is used to deliver updates to the Internet-of-things device and is not established by the certificate authority for purposes of delivering the certificate. 
     
     
         19 . The computer storage medium of  claim 15 , wherein the multifactor authentication comprises authenticating based on the IP address and the certificate, and wherein the multifactor authentication is provided by
 receiving, from a third party device, a validation request, wherein the validation request comprises a copy of the certificate and data that indicates the IP address of the Internet-of-things device;   validating the certificate and the IP address; and   responding to the validation request based on results of the validating.   
     
     
         20 . The computer storage medium of  claim 19 , wherein validating the certificate comprises communicating with a certificate authority that issued the certificate to validate the certificate received by the third party device, and wherein validating the IP address comprises comparing the IP address received from the third party device to a stored IP address that is stored for the Internet-of-things device.