US 11,888,858 B2 · Calculus for trust in edge computing and named function networks

Abstract

Various aspects of methods, systems, and use cases for verification and attestation of operations in an edge computing environment are described, based on use of a trust calculus and established definitions of trustworthiness properties. In an example, an edge computing verification node is configured to: obtain a trust representation, corresponding to an edge computing feature, that is defined with a trust calculus and provided in a data definition language; receive, from an edge computing node, compute results and attestation evidence from the edge computing feature; attempt validation of the attestation evidence based on attestation properties defined by the trust representation; and communicate an indication of trustworthiness for the compute results, based on the validation of the attestation evidence. In further examples, the trust representation and validation is used in a named function network (NFN), for dynamic composition and execution of a function.

Claims25

Dependent claims

An edge computing verification node, comprising:

a plurality of hardware components, including processing circuitry;
and
a memory device including instructions embodied thereon, wherein the instructions, which when executed by the processing circuitry, configure the hardware components to perform operations to:
obtain a trust representation of an edge computing feature, the edge computing feature provided by an edge computing node, the trust representation defined according to a trust calculus, and the trust representation provided in a data model of a manifest expressed according to a data definition language, wherein the trust representation defines properties of attestation for the edge computing verification node to validate before establishing trust in compute results produced from a use of the edge computing feature;
receive, from the edge computing node, the compute results produced from the use of the edge computing feature;
receive, from the edge computing node, attestation evidence associated with the use of the edge computing feature;
attempt validation of the attestation evidence based on the properties of attestation defined by the data model of the manifest;
and
communicate an indication of trustworthiness for the compute results, based on the validation of the attestation evidence.

6 more elements

At least one non-transitory machine-readable storage device comprising instructions stored thereupon, which when executed by processing circuitry of an edge computing verification node, cause the processing circuitry to perform operations comprising:

obtaining a trust representation of an edge computing feature, the edge computing feature provided by an edge computing node, the trust representation defined according to a trust calculus, and the trust representation provided in a data model of a manifest expressed according to a data definition language, wherein the trust representation defines properties of attestation for the edge computing verification node to validate before establishing trust in compute results produced from a use of the edge computing feature;
receiving, from the edge computing node, the compute results produced from the use of the edge computing feature;
receiving, from the edge computing node, attestation evidence associated with the use of the edge computing feature;
attempting validation of the attestation evidence based on the properties of attestation defined by the data model of the manifest;
and
communicating an indication of trustworthiness for the compute results, based on the validation of the attestation evidence.

3 more elements

Dependencies are inferred from the claim text.

Calculus for trust in edge computing and named function networks

Life of this patent

Calculus for trust in edge computing and named function networks

Life of this patent

Abstract

Claims25