Patent ID: 11968302
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 1:
2. The method of claim 1, wherein a device member authentication handshake is performed by the KDS interface on the client device and the server device using the tenant identifier, the device member PSK (M-PSK), and the M-PSK identity hint as a first factor of a device authentication, and further wherein a session key is generated using a key exchange handshake between the KDS interface and the KDS or the KDS proxy, and further wherein a device member validation is performed as a second factor of the device authentication, by:
performing, by the KDS or the KDS proxy, a DNS reverse lookup of a device member IP address to query for the first DNS hostname; and
retrieving, by the KDS or the KDS proxy, the first DNS hostname from a resource record in a DNS response; and
comparing and matching, by the KDS or the KDS proxy, the retrieved first DNS hostname with a device member identifier in a plurality of KDS requests.