Attestation in optical transport network environments

A system comprising:

• at least one processor;
• and
• a non-transitory computer-readable storage medium comprising instructions stored thereon which, when executed by the at least one processors, cause the at least one processors to:
• receive, by a relying node in an optical transport network environment, attestation information from an attester node in the optical transport network environment;
• verify a trustworthiness of the attester node by identifying a level of trust of the attester node from the attestation information;
• control network service access of the attester node through the relying node in the optical transport network environment based on the level of trust of the attester node identified from the attestation information;
• and
• in response to a determination, by the relying node, that the attester node has become compromised as a result of receiving second attestation information from the attester node, discontinue transmission of data between the relying node and the attester node.

A non-transitory computer-readable medium comprising instructions stored thereon which, when executed by a processor, are effective to cause the processor to:

• receive, by a relying node in a first domain, attestation information from an attester node in a second domain, wherein communicating between the first domain and the second domain requires traversal of at least one node other than the relying node and the attester node;
• verify a trustworthiness of the attester node by identifying a level of trust of the attester node from the attestation information;
• control network service access of the attester node through the relying node in the first domain based on the level of trust of the attester node identified from the attestation information;
• and
• in response to a determination, by the relying node, that the attester node has become compromised as a result of receiving second attestation information from the attester node, discontinue transmission of data between the relying node and the attester node.