US 2021/0281553 A1 · NETWORK ENCLAVE ATTESTATION FOR NETWORK AND COMPUTE DEVICES

Abstract

An enclave manager of a network enclave obtains a request to retrieve configuration information and state information corresponding to compute devices and network devices comprising a network enclave. The request specifies a set of parameters of the configuration information and the state information usable to generate a response to the request. The enclave manager evaluates the compute devices, the network devices, and network connections among these devices within the network enclave to obtain the configuration information and the state information. Based on the configuration information and the state information, the enclave manager determines whether the network enclave is trustworthy. Based on the parameters of the request, the enclave manager generates a response indicating a summary that is used to identify the trustworthiness of the network enclave.

Claims20

Dependent claims

A computer-implemented method comprising:

obtaining a request to retrieve configuration information and state information corresponding to compute devices and network devices comprising a network enclave, the request specifying a set of parameters of the configuration information and the state information;
evaluating the compute devices, the network devices, and network connections among the compute devices and the network devices within the network enclave to obtain the configuration information and the state information;
determining, based on the configuration information and the state information, whether the compute devices and the network devices comprising the network enclave are trustworthy as part of a determination;
generating, based on the set of parameters of the configuration information and the state information, a response to the request, the response comprising at least the determination;
and
providing the response to fulfill the request.

3 more elements

A system, comprising:

one or more processors;
and
memory including instructions that, as a result of being executed by the one or more processors, cause the system to:
receive a request to obtain configuration information and state information corresponding to a network enclave, the request specifying a set of parameters of the configuration information and the state information;
evaluate compute devices, network devices, and network connections of the network enclave to obtain the configuration information and the state information in accordance with the set of parameters;
determine, based on the configuration information and the state information, a trustworthiness state of the network enclave;
generate, using the configuration information and the state information and based on the set of parameters, a response to the request, the response specifying at least information corresponding to the trustworthiness state of the network enclave;
and
provide the response to fulfill the request.

6 more elements

A non-transitory computer-readable storage medium storing thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to:

receive a request to determine a trustworthiness state of a network enclave, the request specifying a set of parameters for determining the trustworthiness state and for providing a response to the request;
evaluate compute devices, network devices, and network connections of the network enclave to obtain data for determining the trustworthiness state of the network enclave in accordance with the set of parameters;
determine, using the data, the trustworthiness state of the network enclave;
generate, using the data and based on the set of parameters, the response to the request, the response specifying information corresponding to the trustworthiness state of the network enclave;
and
provide the response to fulfill the request.

3 more elements

Dependencies are inferred from the claim text.

Network enclave attestation for network and compute devices

Life of this patent

Network enclave attestation for network and compute devices

Life of this patent

Abstract

Claims20