| CPC H04W 12/06 (2013.01) [H04L 63/20 (2013.01); H04W 12/63 (2021.01); H04L 2463/082 (2013.01)] | 18 Claims |

|
1. A method for enabling multi-factor authentication (MFA) for an Internet Of Things (IoT) device, the method comprising:
receiving a network connection request from the IoT device to connect to a network;
fetching authentication information for the IoT device in response to the request,
wherein the authentication information includes subscription credentials to authenticate the IoT device to the network, and an MFA policy that defines a user or location restriction to authentication of the IoT device to an application accessed over the network;
authenticating the device to the network;
in response to the authentication of the device to the network, establishing a network connection between the IoT device and the network;
after the device is authenticated and the network connection is established between the IoT device and network, determining if a location restriction is satisfied;
in response to the location restriction being satisfied, applying the MFA policy; and
after successful compliance with the MFA policy establishing a session between the IoT device and the application over the network.
|