Systems and methods for generating trust scores and related recommendations using SPDM-enabled devices

A trust-based score and recommendation generating method comprising:

• receiving a plurality of trust-based data elements from a plurality of Security Protocol and Data Model (SPDM)-enabled devices conforming to a SPDM specification, wherein the SPDM-enabled devices are configured in a computing device, and wherein the trust-based data element are associated with a plurality of SPDM-based measurements performed on the SPDM-enabled devices;
• deriving an overall trust based score for an Information Handling System (HIS) based upon the received trust-based data elements;
• apply a plurality of weights to each of a plurality of types of the SPDM-based measurements;
• and
• determining that one or more recommendations are to be generated according to an excess fluctuation in a plurality of the generated trust scores over time.

A computer program product comprising a non-transitory computer readable storage medium having program instructions stored thereon that, upon execution by an Information Handling System (IHS), cause the IHS to:

• receive an attestation request from a requesting device;
• receive a plurality of trust-based data elements from a plurality of Security Protocol and Data Model (SPDM)-enabled devices conforming to a SPDM specification, wherein the SPDM-enabled devices are configured in a computing device, and wherein the trust-based data element are associated with a plurality of SPDM-based measurements performed on the SPDM-enabled devices;
• derive an overall trust based score for the IHS based upon the received trust-based data elements;
• apply a plurality of weights to each of a plurality of types of the SPDM-based measurements;
• and
• determine that one or more recommendations are to be generated according to an excess fluctuation in a plurality of the generated trust scores over time.