me and my friend are doing a project for a company. It involves getting some information from the database and display it on a smartglass device (epson, sony, ...). Now we want to build a RESTful service where the glass can get it's data from. The question is, how i can secure this service, because i don't want it to be accessible from anywhere besides from the glasses. My solution would be to implement some kind of whitelist on the server where the MAC-address from each glass device (like 3-10 in the whole company) is stored. What do you think would my best bet be?