IP Library › Granted Patent US 12701123
Granted Patent B2
US 12701123 · App. 17/655,140 · Granted Aug 4, 2026

Use of a trust score plan

Inventors: Charles Damian O'Neill (Ballymena, GB); Simon James (Newtownards, GB); Hayden Paul Shorter (Bangor, GB); Kieran Gerald McPeake (Belfast, GB)
Assignee: Hewlett Packard Enterprise Development LP
H04L63/1416H04L63/102H04L63/1425H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12701123
App. No.
17/655,140
Granted
Aug 4, 2026
Kind
B2
Abstract

This disclosure describes techniques that include assessing trust in a system, and in particular, assessing trust for entities based on a trust score plan. In one example, this disclosure describes a method that includes identifying, by the computing system, a selected trust score plan from a plurality of trust score plans associated with a network entity in a computer network; storing, by a computing system, information collected about the network entity in the computer network; determining, by the computing system and based on the identified trust score plan and the stored information, a trust score for the network entity; and modifying, by the computing system and based on the trust score for the network entity, operations within the computer network.

Claims (56)

1 . A method comprising:

identifying, by a computing system, a first trust score plan associated with a first network device in a computer network;

identifying, by the computing system, a second trust score plan associated with a second network device in the computer network;

storing, by the computing system, information collected about the first network device and the second network device;

determining, by the computing system and based on the first trust score plan and the stored information, a first trust score for the first network device;

determining, by the computing system and based on the second trust score plan and the stored information, a second trust score for the second network device; and

modifying, by the computing system and based the second trust score not exceeding a threshold, traffic within the computer network to divert traffic away from the second network device.

2 . The method of claim 1 , wherein identifying the first trust score plan includes:

identifying the first trust score plan based on input.

3 . The method of claim 1 , wherein storing information collected about the first network device includes:

storing information received from a plurality of source services.

4 . The method of claim 1 , wherein determining the first trust score includes:

determining the first trust score in response to a trigger.

5 . The method of claim 4 , wherein the trigger is one of:

input, an event, or a periodic alarm.

6 . The method of claim 5 , wherein the trigger includes information about a context in which the trigger was initiated, and wherein identifying the first trust score plan includes:

identifying the first trust score plan based on the context.

7 . The method of claim 1 , further comprising:

enabling, by the computing system, modification of the first trust score plan to generate a modified first trust score plan.

8 . The method of claim 7 , further comprising:

determining, by the computing system and based on the modified first trust score plan and the stored information, a new trust score for the first network device; and

modifying, by the computing system and based on the new trust score for the first network device, operations within the computer network.

9 . The method of claim 1 , wherein determining the first trust score includes:

generating a trust score result that includes the first trust score and supporting information, wherein the supporting information enables reproduction of calculations underlying the first trust score.

10 . The method of claim 1 , wherein modifying traffic includes changing configurations to at least one of:

a router, a firewall, an access control system, an asset management system, or an alarm system.

11 . The method of claim 1 , wherein modifying traffic includes at least one of:

changing routing algorithms, limiting access to one or more network devices, marking one or more network devices as unavailable, or triggering an alarm.

12 . A system comprising processing circuitry and a storage device, wherein the processing circuitry has access to the storage device and is configured to:

identify a first trust score plan associated with a first network device in a computer network;

identify a second trust score plan associated with a second network device in the computer network;

store information collected about the first network device and the second network device;

determine, based on the first trust score plan and the stored information, a first trust score for the first network device;

determine, based on the second trust score plan and the stored information, a second trust score for the second network device; and

modify, based on the second trust score not exceeding a threshold, traffic within the computer network to divert traffic away from the second network device.

13 . The system of claim 12 , wherein to identify the first trust score plan, the processing circuitry is further configured to includes:

identify the first trust score plan based on input.

14 . The system of claim 12 , wherein to store information collected about the first network device, the processing circuitry is further configured to:

store information received from a plurality of source services within the computer network.

15 . The system of claim 12 , wherein to determine the first trust score, the processing circuitry is further configured to:

determine the first trust score in response to a trigger.

16 . The system of claim 15 , wherein the trigger is one of:

input, an event, or a periodic alarm.

17 . The system of claim 16 , wherein the trigger includes information about a context in which the trigger was initiated, and wherein to identify the first trust score plan, the processing circuitry is further configured to:

identify the first trust score plan based on the context.

18 . The system of claim 12 , wherein the processing circuitry is further configured to:

enable modification of the first trust score plan to generate a modified first trust score plan.

19 . The system of claim 12 , wherein to determine the first trust score, the processing circuitry is further configured to:

generate a trust score result that includes the first trust score and supporting information, wherein the supporting information enables reproduction of calculations underlying the first trust score.

20 . Non-transitory computer-readable media comprising instructions that, when executed, configure processing circuitry of a computing system to:

identify a first trust score plan associated with a first network device in a computer network;

identify a second trust score plan associated with a second network device in the computer network;

store information collected about the first network device and the second network device;

determine, based on the first trust score plan and the stored information, a first trust score for the first network device;

determine, based on the second trust score plan and the stored information, a second trust score for the second network device; and

modify, based on the second trust score not exceeding a threshold, traffic within the computer network to divert traffic away from the second network device.