# US 12,003,489 B2 · Mechanisms to reduce exposure of sensitive telemetry data in computing networks

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,003,489 B2
- Document ID: US12003489B2
- Status: Granted
- Kind: B2
- Application number: 17/544,355
- Filed: 2021-12-07
- Published: 2022-05-05
- Granted: 2024-06-04
- Earliest claimed: 2021-12-07
- Assignees: Intel Corporation
- Applicants: Intel Corporation
- Inventors: Reshma Lal; Anahit Tarkhanyan; Jianping Xu; Christine E. Severns-Williams
- Web page: https://patentgrep.com/patent/US12003489B2

## CPC

- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 9/0819: {Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062)}
- H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 9/40: Network security protocols
- H04L 43/04: Processing captured monitoring data, e.g. for logfile generation
- H04L 43/06: Generation of reports
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/1433: {Vulnerability analysis}
- H04L 63/1475: {Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored}
- H04L 41/0893: Assignment of logical groups to network elements
- H04L 41/0894: Policy-based network configuration management
- H04L 41/147: for predicting network behaviour
- H04L 43/0817: by checking functioning
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

One or more machine readable storage media, an apparatus, and a method. The apparatus provides a mechanism to implement a trusted telemetry governor (TTG) inside a trusted execution environment. The TTG is to determine a security policy to be applied to telemetry data corresponding to component of a computing infrastructure, receive the telemetry data in encrypted format and, based on the security policy: process the telemetry data including at least one of generating transformed telemetry data or analyzing the telemetry data to generate a report therefrom, and generating telemetry information from the telemetry data. The telemetry information includes at least one of processed telemetry data, a report, or a recommendation based on an analysis of the telemetry data. The TTG is to send the telemetry information outside of the trusted execution environment to a consumer of the telemetry data.

## Claims

### Claim 1

One or more machine readable storage media comprising instructions stored thereon, the instructions when executed by a machine, cause the machine to implement a trusted telemetry governor (TTG) inside a trusted execution environment by:
determining security policy to be applied to telemetry data corresponding to component of a computing infrastructure, the security policy to indicate a correlation between, on one hand, a type of telemetry data consumer, and on another hand, at least one of a type or a form of telemetry data to be made accessible to the telemetry data consumer;
receiving the telemetry data in encrypted format;
based on the security policy:
processing the telemetry data including at least one of generating transformed telemetry data or analyzing the telemetry data to generate a report therefrom; and
generating telemetry information from the telemetry data, the telemetry information including at least one of processed telemetry data, a report or a recommendation based on an analysis of the telemetry data; and
sending the telemetry information outside of the trusted execution environment.

### Claim 2 (depends on 1)

The one or more machine readable storage media of claim 1, wherein sending the telemetry information outside of the trusted execution environment includes sending the telemetry information to the telemetry data consumer, the machine to further verify an authorization certificate presented by the telemetry data consumer prior to sending the telemetry data to the telemetry data consumer, the authorization certificate based on the security policy.

### Claim 3 (depends on 2)

The one or more machine readable storage media of claim 2, the machine to further send attestation data to the telemetry data consumer based on the security policy.

### Claim 4 (depends on 3)

The one or more machine readable storage media of claim 3, the machine to further establish a secret key between the TTG and the telemetry data consumer and to verify the authorization certificate based on the secret key.

### Claim 5 (depends on 1)

The one or more machine readable storage media of claim 1, wherein receiving the telemetry data includes receiving the telemetry data from a telemetry data collector (TDC), the TDC corresponding to an entity to directly receive the telemetry data from the component, the machine to further verify an authorization certificate presented by the TDC prior to receiving the telemetry data, the authorization certificate based on the security policy.

### Claim 6 (depends on 5)

The one or more machine readable storage media of claim 5, the machine to further send attestation data to the TDC based on the security policy.

### Claim 7 (depends on 5)

The one or more machine readable storage media of claim 5, the machine to further establish a secret key between the TTG and the TDC and to verify the authorization certificate based on the secret key.

### Claim 8 (depends on 1)

The one or more machine readable storage media of claim 1, the machine to further receive the telemetry data directly from the component.

### Claim 9 (depends on 1)

The one or more machine readable storage media of claim 1, wherein sending the telemetry information including sending the telemetry information in encrypted format.

### Claim 10 (depends on 1)

The one or more machine readable storage media of claim 1, wherein the machine is to configure the TTG with a plurality of security policies based on telemetry consumer needs, and to adjust a security policy configured to the TTG and associated with a telemetry consumer based on a security policy adjustment request.

### Claim 11 (depends on 1)

The one or more machine readable storage media of claim 1, wherein the machine is to process the telemetry data and generate the telemetry information by implementing an artificial intelligence model on the telemetry data.

### Claim 12 (depends on 1)

The one or more machine readable storage media of claim 1, wherein the recommendation includes at least one of:
a recommendation to migrate a workload running on the component to a different component of the computing infrastructure;
a recommendation to take preventative action to cause migration of data stored in the component to the different component of the computing infrastructure;
a recommendation to prevent new workloads from being placed on the component;
a recommendation to prevent new data from being placed on the component;
a recommendation to split the workload running on the component between the component and the different component;
a recommendation to schedule maintenance or repair on the component; or
a recommendation to replace the component.

### Claim 13 (depends on 1)

The one or more machine readable storage media of claim 1, wherein the telemetry data is first telemetry data, and the component is a first component, the machine to further:
determine a plurality of security policies to be applied to respective ones of a plurality of sets of telemetry data including the first telemetry data, the sets corresponding to respective ones of a plurality of components including the first component;
receive the sets of telemetry data in encrypted format;
based on each of the plurality of security policies:
process a corresponding set of the sets of telemetry data, processing including at least one of generating a transformed set of telemetry data or analyzing the corresponding set to generate a report therefrom; and
generate corresponding telemetry information from the corresponding set, the corresponding telemetry information from the corresponding set including at least one of processed telemetry data, a report or a recommendation based on an analysis of the telemetry data; and
send the corresponding telemetry information outside of the trusted execution environment.

### Claim 14 (depends on 1)

The one or more machine readable storage media of claim 1, wherein the component is a component of a tenant, the machine to further:
determine a trust score for the tenant, the trust score corresponding to the tenant and to a workload running on the tenant;
determine whether the trust score for the tenant is less than or equal to a first trust threshold, Trust_Threshold_I;
determine whether the trust score for the tenant is less than or equal to a second trust threshold, Trust_Threshold_M;
in response to a determination that the trust score for the tenant is less than or equal to the first trust threshold, run the workload on the tenant in a trusted zone partitioned from a network that includes the tenant; and
in response to a determination that the trust score for the tenant is more than the first trust threshold and less than or equal to the second trust threshold, run the workload on the tenant in a trusted zone with increased monitoring.

### Claim 15

An apparatus of a computing node of a network, the apparatus including a memory storing logic to implement a trusted telemetry governor (TTG) inside a trusted execution environment, and one or more processors coupled to the memory and to execute the logic to:
determine security policy to be applied to telemetry data corresponding to a component of a computing infrastructure, the security policy to indicate a correlation between, on one hand, a type of telemetry data consumer, and on another hand, at least one of a type or a form of telemetry data to be made accessible to the telemetry data consumer;
receive the telemetry data in encrypted format;
based on the security policy:
process the telemetry data including at least one of generating transformed telemetry data or analyzing the telemetry data to generate a report therefrom; and
generate telemetry information from the telemetry data, the telemetry information including at least one of processed telemetry data, a report or a recommendation based on an analysis of the telemetry data; and
send the telemetry information outside of the trusted execution environment.

### Claim 16 (depends on 15)

The apparatus of claim 15, wherein sending the telemetry information outside of the trusted execution environment includes sending the telemetry information to the telemetry data consumer, the one or more processors to further verify an authorization certificate presented by the telemetry data consumer prior to sending the telemetry data to the telemetry data consumer, the authorization certificate based on the security policy.

### Claim 17 (depends on 16)

The apparatus of claim 16, the one or more processors to further send attestation data to the telemetry data consumer based on the security policy.

### Claim 18 (depends on 17)

The apparatus of claim 17, the one or more processors to further establish a secret key between the TTG and the telemetry data consumer and to verify the authorization certificate based on the secret key.

### Claim 19 (depends on 15)

The apparatus of claim 15, wherein receiving the telemetry data includes receiving the telemetry data from a telemetry data collector (TDC), the TDC corresponding to an entity to directly receive the telemetry data from the component, the one or more processors to further verify an authorization certificate presented by the TDC prior to receiving the telemetry data, the authorization certificate based on the security policy.

### Claim 20

A method to be performed by an apparatus of a computing node of a network to implement a trusted telemetry governor (TTG) inside a trusted execution environment, the method including:
determining security policy to be applied to telemetry data corresponding to a component of a computing infrastructure, the security policy to indicate a correlation between, on one hand, a type of telemetry data consumer, and on another hand, at least one of a type or a form of telemetry data to be made accessible to the telemetry data consumer;
receiving the telemetry data in encrypted format;
based on the security policy:
processing the telemetry data including at least one of generating transformed telemetry data or analyzing the telemetry data to generate a report therefrom; and
generating telemetry information from the telemetry data, the telemetry information including at least one of processed telemetry data, a report or a recommendation based on an analysis of the telemetry data; and
sending the telemetry information outside of the trusted execution environment.

### Claim 21 (depends on 20)

The method of claim 20, wherein sending the telemetry information outside of the trusted execution environment includes sending the telemetry information to the telemetry data consumer, the method further including verifying an authorization certificate presented by the telemetry data consumer prior to sending the telemetry data to the telemetry data consumer, the authorization certificate based on the security policy.

### Claim 22 (depends on 21)

The method of claim 21, the method further including sending attestation data to the telemetry data consumer based on the security policy.