US Patent 9521032 Server for authentication, authorization, and accounting

In some implementations, a client device includes a client identifier embedded into a firmware of the client device. A server may register a service with a global authentication, authorization, and account (AAA) server. The client device may request permission to access the service. The request may be signed using a client signature that is based on the identifier. The global AAA server may send the request to the server and the server may determine whether to grant the client device permission. If the global AAA server determines that the server has granted the client device permission, the global AAA server may provide server credentials to the client device and client credentials to the server. The client device may sign a request to connect to the service using the client signature. The server may grant the request in response to authenticating the request using the client signature.