Systems and methods for automatic secret generation and distribution for secure systems

1. A method for automatic secret generation and distribution for secure systems, the method being implemented by an authentication program on a network authenticator, the method comprising: establishing a secure communication channel with an embedded; receiving valid security credentials from the embedded device; determining whether the security credentials have previously been provided to the network authenticator; closing the secure communication channel with the embedded device when it is determined that the security credentials have previously been provided to the network authenticator more than once; receiving from the embedded device via the secure communication channel either a secret for the embedded device or a request to generate the secret for the embedded device only when it is determined that the security credentials have not previously been provided to the network authenticator, wherein the secret enables authentication of the embedded device to other devices within a secure system; generating the secret and transmitting the secret to the embedded device when the network authenticator receives the request to generate the secret; receiving device identification from the embedded device, wherein the device identification is received after the secret has been received by the network authenticator or after the secret has been generated by the network authenticator and transmitted to the embedded device; registering the secret for the embedded device using the device identification for the embedded device; and ending communication with the embedded device.

2. The method of claim 1 , wherein the network authenticator receives the request to generate the secret for the embedded device.

3. The method of claim 2 , wherein the secret is transmitted to the embedded device via the secure communication channel.

4. The method of claim 1 , wherein the network authenticator receives the secret for the embedded device, and wherein the secret was generated by the embedded device.

5. The method of claim 4 , wherein the secret is obtained from a secret location at the embedded device that is only known and accessible by the embedded device.

6. The method of claim 1 , wherein registering the secret comprises associating the secret with the device identification.

7. The method of claim 1 , wherein the secure communications channel allows access to the network authenticator only for secret registration.

8. The method of claim 7 , wherein the communication is discontinued by terminating the secure communication channel such that there is no longer communications between the network authenticator and the embedded device.

9. A network authenticator that is configured for automatic secret generation and distribution for secure systems, the network authenticator comprising: a processor; memory in electronic communication with the processor; instructions stored in the memory, the instructions being executable to: establish a secure communication channel with an embedded device; receive valid security credentials from the embedded device; determine whether the security credentials have previously been provided to the network authenticator; closing the secure communication channel with the embedded device when it is determined that the security credentials have previously been provided to the network authenticator more than once; receive from the embedded device via the secure communication channel either a secret for the embedded device or a request to generate the secret for the embedded device only when it is determined that the security credentials have not previously been provided to the network authenticator, wherein the secret enables authentication of the embedded device to other devices within a secure system; generate the secret and transmit the secret to the embedded device when the network authenticator receives the request to generate the secret; receive device identification from the embedded device, wherein the device identification is received after the secret has been received by the network authenticator or after the secret has been generated by the network authenticator and transmitted to the embedded device; register the secret for the embedded device using the device identification for the embedded device; and end communication with the embedded device.

10. The network authenticator of claim 9 , wherein the network authenticator receives the request to generate the secret for the embedded device.

11. The network authenticator of claim 10 , wherein the instructions are further executable to transmit the secret via the secure communication channel.

12. The network authenticator of claim 9 , wherein the network authenticator receives the secret for the embedded device, and wherein the secret was generated by the embedded device.

13. A non-transitory computer-readable medium comprising executable instructions for automatic secret generation and distribution for secure systems, the executable instructions being executed by an authentication program on a network authenticator, the instructions being executable to: establish a secure communication channel with an embedded device; receive valid security credentials from the embedded device; determine whether the security credentials have previously been provided to the network authenticator; closing the secure communication channel with the embedded device when it is determined that the security credentials have previously been provided to the network authenticator more than once; receive from the embedded device via the secure communication channel either a secret for the embedded device or a request to generate the secret for the embedded device when it is determined that the security credentials have not previously been provided to the network authenticator, wherein the secret enables authentication of the embedded device to other devices within a secure system; generate the secret and transmit the secret to the embedded device when the network authenticator receives the request to generate the secret; receive device identification from the embedded device, wherein the device identification is received after the secret has been received by the network authenticator or after the secret has been generated by the network authenticator and transmitted to the embedded device; register the secret for the embedded device using the device identification for the embedded device; and end communication with the embedded device.

14. The non-transitory computer-readable medium of claim 13 , wherein the network authenticator receives the request to generate the secret for the embedded device.

15. The non-transitory computer-readable medium of claim 14 , wherein the instructions are further executable to transmit the secret via the secure communication channel.

16. The non-transitory computer-readable medium of claim 13 , wherein the network authenticator receives the secret for the embedded device, and wherein the secret was generated by the embedded device.