Method to control access between network endpoints based on trust scores calculated from information system component analysis
Signatures are generated for modules in a computer system. The signatures can be assembled into an integrity log. The signatures are compared with signatures in a database in an integrity validator. Once signatures are either validated or invalidated, a trust score can be generated. The trust score can then be used to determine whether the computer system should be granted access to a resource using a policy.
1. A system, comprising:
a network ( 110 , 135 );
a resource ( 145 ) connected to the network ( 110 , 135 );
a computer ( 105 ) connected to the network ( 110 , 135 ), including an integrity log generator ( 150 ) configured to generate an integrity log including a first plurality of signatures for a first plurality of modules, the integrity log including one signature in the first plurality of signatures for each module in the first plurality of modules; and
an apparatus ( 140 , 160 ) connected to the network ( 110 , 135 ), including:
a first database ( 205 ) configured to store a second plurality of signatures for a second plurality of modules;
a receiver ( 210 ) configured to receive from the computer ( 105 ) the integrity log;
a trust score generator ( 225 ) configured to generate a trust score based on a comparison of the integrity log with the second plurality of signatures; and
a policy ( 230 ) programmed into the apparatus to control access to the resource ( 145 ), the policy ( 230 ) including a threshold score ( 235 , 240 ) for a machine to receive full access to the resource ( 145 );
wherein access to the resource ( 145 ) by the computer ( 105 ) is controlled by the policy ( 230 ).
2. A system according to claim 1 , wherein:
the system includes a second apparatus ( 140 , 160 ), the second apparatus ( 140 , 160 ) including a second database ( 205 ) configured to store a third plurality of signatures for a third plurality of modules and a validator ( 220 ) configured to attempt to validate a subset of the first plurality of modules for which the corresponding signatures are not found in the first database ( 205 ); and
the apparatus ( 140 , 160 ) includes a transmitter ( 215 ) configured to transmit the signatures corresponding to the subset of the first plurality of modules for which the corresponding signatures are not found in the first database ( 205 ) to the second apparatus ( 140 , 160 ).
3. A system according to claim 2 , further comprising a second network ( 110 , 135 ), the apparatus ( 140 , 160 ) and the second apparatus ( 140 , 160 ) connected to the second network ( 110 , 135 ).
4. A system according to claim 1 , wherein the apparatus ( 140 , 160 ) further includes a transmitter ( 215 ) configured to transmit said trust score to the computer ( 105 ).
5. A system according to claim 4 , wherein the computer ( 105 ) further includes a receiver configured to receive said trust score from the apparatus ( 140 , 160 ) so that the computer can determine whether it can access the resource ( 145 ).
6. A system according to claim 1 , wherein said first plurality of modules includes modules that are accessed by the computer ( 105 ).
7. A system according to claim 1 , wherein said first plurality of modules includes all modules on the computer ( 105 ).
8. A system according to claim 1 , wherein said first plurality of modules includes at least one hardware module.
9. A system, comprising:
a network ( 110 , 135 );
a resource ( 145 ) connected to the network ( 110 , 135 );
a computer ( 105 ) connected to the network ( 110 , 135 ), including an integrity log generator ( 150 ) configured to generate an integrity log including a first plurality of signatures for a first plurality of modules, the integrity log including one signature in the first plurality of signatures for each module in the first plurality of modules, the computer including a policy ( 230 ) programmed into the computer to control access to the resource ( 145 ), the policy ( 230 ) including a threshold score ( 235 , 240 ) for a machine to receive full access to the resource ( 145 ); and
an apparatus ( 140 , 160 ) connected to the network ( 110 , 135 ), including:
a first database ( 205 ) configured to store a second plurality of signatures for a second plurality of modules;
a receiver ( 210 ) configured to receive from the computer ( 105 ) the integrity log; and
a trust score generator ( 225 ) configured to generate a trust score based on a comparison of the integrity log with the second plurality of signatures;
wherein access to the resource ( 145 ) by the computer ( 105 ) is controlled by the policy ( 230 ).
10. A system according to claim 9 , wherein:
the system includes a second apparatus ( 140 , 160 ), the second apparatus ( 140 , 160 ) including a second database ( 205 ) configured to store a third plurality of signatures for a third plurality of modules and a validator ( 220 ) configured to attempt to validate a subset of the first plurality of modules for which the corresponding signatures are not found in the first database ( 205 ); and
the apparatus ( 140 , 160 ) includes a transmitter ( 215 ) configured to transmit the signatures corresponding to the subset of the first plurality of modules for which the corresponding signatures are not found in the first database ( 205 ) to the second apparatus ( 140 , 160 ).
11. A system according to claim 10 , further comprising a second network ( 110 , 135 ), the apparatus ( 140 , 160 ) and the second apparatus ( 140 , 160 ) connected to the second network ( 110 , 135 ).
12. A system according to claim 9 , wherein the apparatus ( 140 , 160 ) further includes a transmitter ( 215 ) configured to transmit said trust score to the computer ( 105 ).
13. A system according to claim 12 , wherein the computer ( 105 ) further includes a receiver configured to receive said trust score from the apparatus ( 140 , 160 ) so that the computer can determine whether it can access the resource ( 145 ).
14. A system according to claim 9 , wherein said first plurality of modules includes modules that are accessed by the computer ( 105 ).
15. A system according to claim 9 , wherein said first plurality of modules includes all modules on the computer ( 105 ).
16. A system according to claim 9 , wherein said first plurality of modules includes at least one hardware module.