Method of onboarding a user device

1 . A method of onboarding a user device onto an industrial network, the method comprising:

receiving a registration request from the user device, wherein the user device is connected to a gateway device associated with a first wireless network, wherein the registration request includes one or more network access parameters associated with the user device, and wherein at least one network access parameter of the one or more network access parameters is indicative of the gateway device, the first wireless network, or the gateway device and the first wireless network;

obtaining network information associated with the first wireless network from a network management device of the first wireless network; and

authenticating the user device based on the received registration request, wherein authenticating the user device comprises verifying validity of one or more network access parameters of the registration request,

wherein the network information is for verifying the validity of the one or more network access parameters of the registration request,

wherein the one or more network access parameters include an identifier associated with the gateway device, an identifier associated with a transmission channel on which the registration request is transmitted, or one or more identifiers associated with one or more network devices within a predetermined proximity, and

wherein verifying validity of the one or more network access parameters of the registration request comprises verifying validity of a logical transmission channel utilized to transmit the registration request, a frequency band utilized for transmission of the registration request, a radio channel on which the registration request is transmitted, a modulation method used in relation to the registration request, a signal strength associated with a signal related to the registration request, a direction of departure associated with the transmission of the registration request, or any combination thereof.

2 . The method of claim 1 , further comprising generating provisioning data for the user device based on the received registration request.

3 . The method of claim 2 , wherein the provisioning data includes at least one configuration parameter, and

wherein validity of the at least one configuration parameter is determined based on the one or more network access parameters.

4 . The method of claim 2 , wherein the provisioning data includes an identity certificate used by the user device for communicating with at least one network device of the industrial network, and

wherein the identify certificate includes the one or more network access parameters of the registration request.

5 . The method of claim 2 , wherein the provisioning data further comprises an onboarding profile associated with the user device,

wherein the onboarding profile comprises information associated with one or more services and applications associated with the user device and an identifier associated with at least one enrollment server, and

wherein the user device is configured to communicate with the at least one enrollment server based on the identifier associated with the at least one enrollment server.

6 . The method of claim 5 , wherein the onboarding profile is generated based on a device identifier of the registration request.

7 . The method of claim 5 , wherein the onboarding profile comprises a sequence of onboarding associated with the one or more services and applications.

8 . The method of claim 7 , wherein the onboarding profile further comprises one or more credentials associated with the one or more services and applications, and

wherein the user device is configured to transmit the one or more credentials to the at least one enrollment server for authentication of the user device.

9 . The method of claim 8 , wherein the onboarding profile further comprises certificate attributes and signing information,

wherein the certificate attributes and the signing information are used by the user device to generate a certificate to communicate with the at least one enrollment server.

10 . The method of claim 1 , wherein verifying validity of the one or more network access parameters of the registration request comprises verifying validity of the logical transmission channel, the frequency band, the radio channel, the modulation method, the direction of departure, or any combination thereof.

11 . The method of claim 10 , wherein verifying validity of the one or more network access parameters of the registration request comprises verifying validity of the frequency band, the modulation method, the direction of departure, or any combination thereof.

12 . The method of claim 10 , wherein verifying validity of the one or more network access parameters of the registration request comprises verifying validity of the modulation method, the direction of departure, or a combination thereof.

13 . An onboarding device for onboarding a user device onto an industrial network, the onboarding device comprising:

a network interface for communicating with the user device;

one or more processors connected to a memory module, the one or more processors configured to:

receive a registration request from the user device, wherein the user device is connected to a gateway device associated with a first wireless network, wherein the registration request includes one or more network access parameters associated with the user device, and wherein at least one network access parameter of the one or more network access parameters is indicative of the gateway device, the first wireless network, or the gateway device and the first wireless network;

obtain network information associated with the first wireless network from a network management device of the first wireless network; and

authenticate the user device based on the received registration request, wherein the authentication of the user device comprises verification of validity of one or more network access parameters of the registration request,

wherein the network information is for the verification of the validity of the one or more network access parameters of the registration request,

wherein the one or more network access parameters include an identifier associated with the gateway device, an identifier associated with a transmission channel on which the registration request is transmitted, or one or more identifiers associated with one or more network devices within a predetermined proximity, and

wherein the verification of the validity of the one or more network access parameters of the registration request comprises verification of validity of a logical transmission channel utilized to transmit the registration request, a frequency band utilized for transmission of the registration request, a radio channel on which the registration request is transmitted, a modulation method used in relation to the registration request, a signal strength associated with a signal related to the registration request, a direction of departure associated with the transmission of the registration request, or any combination thereof.

14 . A non-transitory computer-readable storage medium that stores instructions executable by one or more processors to onboard a user device onto an industrial network, the instructions comprising:

receiving a registration request from the user device, wherein the user device is connected to a gateway device associated with a first wireless network, and wherein the registration request includes one or more network access parameters associated with the user device, wherein at least one network access parameter of the one or more network access parameters is indicative of the gateway device, the first wireless network, or the gateway device and the first wireless network;

obtaining network information associated with the first wireless network from a network management device of the first wireless network; and

authenticating the user device based on the received registration request, wherein authenticating the user device comprises verifying validity of the one or more network access parameters of the registration request,

wherein the network information is for verifying the validity of the one or more network access parameters of the registration request,

wherein the one or more network access parameters include an identifier associated with the gateway device, an identifier associated with a transmission channel on which the registration request is transmitted, or one or more identifiers associated with one or more network devices within a predetermined proximity, and

wherein verifying validity of the one or more network access parameters of the registration request comprises verifying validity of a logical transmission channel utilized to transmit the registration request, a frequency band utilized for transmission of the registration request, a radio channel on which the registration request is transmitted, a modulation method used in relation to the registration request, a signal strength associated with a signal related to the registration request, a direction of departure associated with the transmission of the registration request, or any combination thereof.

15 . The non-transitory computer-readable storage medium of claim 14 , wherein the instructions further comprise generating provisioning data for the user device based on the received registration request.

16 . The non-transitory computer-readable storage medium claim 15 , wherein the provisioning data includes at least one configuration parameter, and

wherein validity of the at least one configuration parameter is determined based on the one or more network access parameters.

17 . The non-transitory computer-readable storage medium of claim 15 , wherein the provisioning data includes an identity certificate used by the user device for communicating with at least one network device of the industrial network, and

wherein the identify certificate includes the one or more network access parameters of the registration request.

18 . The non-transitory computer-readable storage medium of claim 15 , wherein the provisioning data further comprises an onboarding profile associated with the user device,

wherein the onboarding profile comprises information associated with one or more services and applications associated with the user device and an identifier associated with at least one enrollment server, and

wherein the user device is configured to communicate with the at least one enrollment server based on the identifier associated with the at least one enrollment server.

19 . The non-transitory computer-readable storage medium of claim 18 , wherein the onboarding profile is generated based on a device identifier of the registration request.