Self-managed trust in internet of things networks

A method of trust management at a network manager, comprising:

• enrolling a network endpoint with a network managed by the network manager;
• receiving trusted reference information for the network endpoint based on enrolling the network endpoint;
• performing verification of the network endpoint based on at least one of the trusted reference information, or an attestation received from the network endpoint;
• and
• enforcing policies to the network endpoint based on a result of the verification.

An apparatus for access management at a trust agent, comprising:

• a memory;
• and
• at least one processor coupled to the memory, and the memory and the at least one processor configured to:
• receive attestation information from a device requesting access to services or resources provided by a service managing entity;
• evaluate the attestation information for the device based on an updateable policy;
• and
• enforce the updateable policy to the device for the services or the resources provided by the service managing entity based on evaluation of the attestation information.

A method of access management at a trust agent, comprising:

• receiving attestation information from a device requesting access to services or resources provided by a service managing entity;
• evaluating the attestation information for the device based on an updateable policy;
• and
• enforcing the updateable policy to the device for the services or the resources provided by the service managing entity based on evaluating the attestation information.