Patent ID: 8015594

Claim:
A first device configured to perform a validation process for a second device, the first device comprising: one or more processors; and logic encoded in one or more tangible media for execution by the one or more processors, and when executed operable to: receive a second device public key, second device private key ownership information, and second device identification information from the second device, wherein validation of the second device identification information is required for a security process using a security protocol; send the public key and the second device identification information to a first authentication, authorization, and accounting (AAA) server for validation of the second device identification information, the first AAA server being a separate device from the first device; receive a response from the first AAA server, the response including an indication of whether the second device identification information is validated with stored second device identification information for the second device public key, the stored second device identification information being accessible to the first AAA server; if the second device identification is validated, verifying the second device private key ownership information to determine if the second device is in possession of a second device private key; and if the second device private key ownership information is verified, perform an action for the security process using the security protocol.