Device authentication using proxy automatic configuration script requests

1. A computer-implemented method executed by a network management system including one or more processors, the method comprising:

generating, by the one or more processors of the network management system, a unique key for a client device;

configuring, by the one or more processors of the network management system, the client device to send a request for a proxy automatic configuration (PAC) script upon accessing a network, the request including a PAC script uniform resource location (URL) associated with the PAC script, the PAC script URL including the unique key;

receiving, by the network management system over a network, a request for the PAC script including requested PAC script URL including a request key;

parsing the requested PAC script URL to retrieve the request key;

authenticating the client device on the network, by the network management system, if the request key matches the client device's unique key;

determining, by the network management system, a first address associated with the request, wherein the first addresses is a Media Access Control (MAC) address or Internet Protocol (IP) address;

associating, by the network management system, the first address with the unique key;

sending, by the network management system, the PAC script associated with the requested PAC script URL to the client device in response to authenticating the client device on the network;

receiving, by the network management system, over the network, a second request for the PAC script including the unique key and a second address wherein the second address is a Media Access Control (MAC) address or Internet Protocol (IP) address; and

in response to the determination that the second address is different from the first address, blocking, by the network management system, a second client associated with the second address from accessing the network.

2. The method of claim 1 , wherein the request for the PAC script is received according to HyperText Transfer Protocol (HTTP).

3. The method of claim 1 , wherein the request for the PAC script is received according to HyperText Transfer Protocol Secure (HTTPS).

4. The method of claim 1 , wherein the client is a device and the method further comprises:

after authenticating the client, authenticating a user of the client based on user-specific credentials associated with the user and different than the unique key.

5. The method of claim 1 , wherein the client is a user of a device.

6. The method of claim 1 , wherein the client is a web browser.

7. The method of claim 1 , further comprising:

determining that the first client is no longer associated with the first address; and de-authenticating the first client on the network upon determining that the first client is no longer associated with the first address.

8. The method of claim 1 , further comprising de-authenticating the client on the network after a configured period of time.

9. A network management system comprising:

a computer storage device for storing; and

a processor coupled with the storage device to execute computer program instructions to:

generate a unique key for a client device;

configure the client device to send a request for a proxy automatic configuration (PAC) script upon accessing a network, the request including a PAC script uniform resource location (URL) associated with the PAC script, the PAC script URL including the unique key;

receive, over a network, a request for the PAC script including requested PAC script URL including a request key; parsing the requested PAC script URL to retrieve the request key;

authenticate the client device on the network if the request key matches the client device's unique key;

determine a first address associated with the request, wherein the first addresses is a Media Access Control (MAC) address or Internet Protocol (IP) address;

associate the first address with the unique key;

send the PAC script associated with the requested PAC script URL to the client device in response to authenticating the client device on the network;

receive, over the network, a second request for the PAC script including the unique key and a second address wherein the second address is a Media Access Control (MAC) address or Internet Protocol (IP) address; and

in response to the determination that the second address is different from the first address, block a second client associated with the second address from accessing the network.

10. The system of claim 9 , wherein the request for the PAC script is received according to HyperText Transfer Protocol (HTTP).

11. The system of claim 9 , wherein the request for the PAC script is received according to HyperText Transfer Protocol Secure (HTTPS).

12. The system of claim 9 , wherein the client is a device and the operations further comprise:

after authenticating the client, authenticating a user of the client based on user-specific credentials associated with the user and different than the unique key.

13. The system of claim 9 , wherein the client is a user of a device.