Trust evaluation
View Patent ↗A solution for evaluating trust in a computer infrastructure is provided. In particular, a plurality of computing devices in the computer infrastructure evaluate one or more other computing devices in the computer infrastructure based on a set of device measurements for the other computing device(s) and a set of reference measurements. To this extent, each of the plurality of computing devices also provides a set of device measurements for processing by the other computing device(s) in the computer infrastructure.
1. A system for evaluating trust in a computer infrastructure, the system comprising:
on each of a plurality of computing devices in the computer infrastructure:
a system for providing device measurements for the computing device for processing by another computing device in the computer infrastructure; and
a system for evaluating another computing device in the computer infrastructure based on a set of device measurements for the another computing device and a set of reference measurements; and
at least one computing device in the computer infrastructure including:
a system for managing a set of computing devices in the computer infrastructure that are evaluated, the managing including at least one of: managing membership in a sub-group of the computer infrastructure or managing a trust level for communications between another computing device in the set of computing devices and other computing devices.
2. The system of claim 1 , the system for managing including:
a system for detecting that a threshold number of computing devices has been exceeded; and
a system for dividing the computer infrastructure into a plurality of sub-groups of computing devices for evaluating trust.
3. The system of claim 2 , the system for dividing assigning at least one computing device in the computer infrastructure to a plurality of sub-groups.
4. The system of claim 1 , further comprising, on each of the plurality of computing devices, a system for receiving the set of reference measurements.
5. The system of claim 1 , the system for evaluating including:
a system for detecting a failure of the another computing device; and
a system for responding to the failure of the another computing device.
6. The system of claim 1 , the system for evaluating including a system for comparing the evaluation of the another computing device with at least one additional computing device in the computer infrastructure.
7. A method of evaluating trust in a computer infrastructure, the method comprising:
on each of a plurality of computing devices in the computer infrastructure:
periodically providing device measurements for the computing device for processing by another computing device in the computer infrastructure; and
periodically evaluating another computing device in the computer infrastructure based on a set of device measurements for the another computing device and a set of reference measurements; and
on at least one of the plurality of computing devices, managing a set of computing devices in the computer infrastructure that are evaluated, the managing including at least one of: managing membership in a sub-group of the computer infrastructure or managing a trust level for communications between another computing device in the set of computing devices and other computing devices.
8. The method of claim 7 , the managing including:
detecting that a threshold number of computing devices has been exceeded; and
dividing the computer infrastructure into a plurality of sub-groups of computing devices for evaluating trust.
9. The method of claim 8 , the dividing including assigning at least one computing device in the computer infrastructure to a plurality of sub-groups.
10. The method of claim 7 , further comprising, on each of the plurality of computing devices, receiving the set of reference measurements.
11. The method of claim 7 , the evaluating including:
detecting a failure of the another computing device; and
responding to the failure of the another computing device.
12. The method of claim 7 , further comprising managing a set of trust evaluation reports for each of the plurality of computing devices in the computer infrastructure.
13. A computer infrastructure comprising:
a plurality of computing devices, each of the plurality of computing devices including:
a system for providing device measurements for the computing device for processing by another computing device in the computer infrastructure; and
a system for evaluating another computing device in the computer infrastructure based on a set of device measurements for the another computing device and a set of reference measurements; and
the plurality of computing devices comprising a plurality of sub-groups, each sub-group comprising a plurality of computing devices and each computing device in each sub-group only evaluating the other at least one computing devices in the sub-group.
14. The computer infrastructure of claim 13 , each of the plurality of computing devices further including a system for managing a set of computing devices in the computer infrastructure that are evaluated.
15. The computer infrastructure of claim 13 , further comprising a system for distributing the set of reference measurements to each of the plurality of computing devices.
16. The computer infrastructure of claim 13 , the system for evaluating including a system for comparing the evaluation of the another computing device with at least one additional computing device in the computer infrastructure.
17. A method of deploying a system for evaluating trust in a computer infrastructure, the method comprising:
providing a computer infrastructure that comprises:
a plurality of computing devices, each of the plurality of computing devices operable to:
provide device measurements for the computing device for processing by another computing device in the computer infrastructure; and
evaluate another computing device in the computer infrastructure based on a set of device measurements for the another computing device and a set of reference measurements; and
at least one computing device operable to:
manage a set of computing devices in the computer infrastructure that are evaluated, the managing including at least one of: managing membership in a sub-group of the computer infrastructure or managing a trust level for communications between another computing device in the set of computing devices and other computing devices.
18. The system of claim 6 , wherein the system for evaluating determines an action based on the comparison.
19. The system of claim 18 , wherein the action is determined using a voting algorithm.
20. The system of claim 1 , the system for managing including:
a system for detecting that a number of computing devices in a sub-group of the computer infrastructure has fallen below a threshold number; and
a system for reassigning each computing device in the sub-group to a new sub-group.