Self-organizing trusted networks
Organizing a trusted network includes receive, by a local device, a message from a first remote trusted device identifying a first service hosted by the first remote trusted device, wherein the local device and the first remote trusted device are in a trusted network. Organizing a trusted network also includes indexing, by the local device, the first service in a registry comprising services available to the local device and a location of each service available, wherein the registry is local to the local device.
1. A storage device or storage disk comprising instructions that, when executed by one or more processors, cause the one or more processors to at least:
during basic discovery, provide information from a local device to a first remote trusted device, the information to indicate the local device supports trusted discovery and to establish the local device as a second remote trusted device;
during the trusted discovery, access, by the local device a trusted discovery message received from the first remote trusted device, the trusted discovery message to identify: (a) security credentials for the first remote trusted device, (b) a first service hosted by the first remote trusted device, and (c) a second service hosted by a third remote trusted device;
verify the security credentials for the first remote trusted device; and
in response to verifying the security credentials for the first remote trusted device:
add the first remote trusted device to a trusted network including the local device; and
index, by the local device the first service and the second service in a registry including third services available to the local device and corresponding locations of the services, the registry to be local to the local device, and the third services in the registry to be opaque to devices that are not part of the trusted network.
2. The storage device or storage disk of claim 1 , wherein the instructions, when executed, further cause the one or more processors to:
identify a request on the local device to utilize the first service;
generate a secure channel between the local device and the first remote trusted device; and
access the first service through the secure channel.
3. The storage device or storage disk of claim 1 , wherein the first service is a security service.
4. The storage device or storage disk of claim 1 , wherein the instructions, when executed, further cause the one or more processors to:
send a response to the first remote trusted device identifying the third services available to the local device, the first remote trusted device to index the third services available to the local device in a second registry local to the first remote trusted device.
5. The storage device or storage disk of claim 1 , wherein the instructions, when executed, further cause the one or more processors to:
access, by the local device, a leave message received from the first remote trusted device; and
in response to the leave message, remove the first service from the registry.
6. The storage device or storage disk of claim 1 , wherein at least one of the third services available to the local device is hosted on a fourth remote trusted device.
7. The storage device or storage disk of claim 1 , wherein the trusted network is a network enclave in a larger network, and a network device that is not in the trusted network is to be prevented from accessing the third services.
8. A storage device or storage disk comprising instructions that, when executed by one or more processors, cause the one or more processors to at least:
during basic discovery, identify, by a local device, a first remote trusted device that supports trusted discovery;
during the trusted discovery, send a trusted discovery message from the local device to the first remote trusted device, the trusted discovery message to identify: (a) security credentials for the local device, (b) a first service hosted by the local device, and (c) a second service hosted by a second remote trusted device;
access an acceptance message received from the first remote trusted device, the acceptance message to indicate an acceptance of the local device to a trusted network including the first remote trusted device, and the acceptance message to include data identifying a third service hosted on the first remote trusted device; and
index, by the local device, the third service in a registry including fourth services available to the local device and corresponding locations of the fourth services, the registry to be local to the local device, and the fourth services in the registry to be opaque to devices that are not part of the trusted network.
9. The storage device or storage disk of claim 8 , wherein the instructions, when executed, further cause the one or more processors to:
send, by the local device, a response to the first remote trusted device identifying the fourth services available to the local device, the first remote trusted device to index the fourth services in a second registry local to the first remote trusted device.
10. The storage device or storage disk of claim 9 , wherein at least one of the fourth services available to the local device is hosted on a third remote trusted device.
11. The storage device or storage disk of claim 10 , wherein the instructions, when executed, further cause the one or more processors to:
identify a request on the local device to utilize the at least one of the fourth services;
generate a secure channel between the local device and the third remote trusted device; and
provide access to the at least one of the fourth services through the secure channel.
12. The storage device or storage disk of claim 8 , wherein the instructions, when executed, further cause the one or more processors to:
identify a request on the local device to utilize the first service;
generate a secure channel between the local device and the first remote trusted device; and
provide access to the first service through the secure channel.
13. The storage device or storage disk of claim 8 , wherein the instructions, when executed, further cause the one or more processors to:
access, by the local device, a leave message received from the first remote trusted device; and
in response to the leave message, remove the first service from the registry.
14. A method of organizing a trusted network, the method comprising:
during basic discovery, identifying, by a local device, a first remote trusted device that supports trusted discovery;
during the trusted discovery, sending, by the local device, a trusted discovery message to the first remote trusted device, the trusted discovery message to include: (a) security credentials for the local device, (b) a first service hosted by the local device, and (c) a second service hosted by a second remote trusted device;
accessing an acceptance message received from the first remote trusted device, the acceptance message to indicate an acceptance of the local device to a trusted network including the first remote trusted device, and the acceptance message to include data identifying a third service hosted on the first remote trusted device; and
indexing, by the local device, the third service in a registry including fourth services available to the local device and corresponding locations of the fourth services, the registry is local to the local device, and the fourth services in the registry to be opaque to devices that are not part of the trusted network.
15. The method of claim 14 , further including:
sending, by the local device, a response to the first remote trusted device identifying the fourth services available to the local device, the first remote trusted device to index the fourth services in a second registry local to the first remote trusted device.
16. The method of claim 14 , wherein at least one of the fourth services available to the local device is hosted on a third remote trusted device.
17. The method of claim 16 , further including:
identifying a request on the local device to utilize the at least one of the fourth services;
generating a secure channel between the local device and the third remote trusted device; and
providing access to the at least one of the fourth services through the secure channel.
18. The method of claim 14 , further including:
identifying a request on the local device to utilize the first service;
generating a secure channel between the local device and the first remote trusted device; and
providing access to the first service though the secure channel.
19. The method of claim 14 , further including:
accessing, by the local device, a leave message received from the first remote trusted device; and
in response to receiving the leave message, removing the third service from the registry.
20. A computer system to organize a trusted network, the computer system comprising:
one or more hardware processors; and
memory, in circuit with the one or more hardware processors, the memory including instructions which, when executed by the one or more hardware processors, cause the one or more hardware processors to at least:
during basic discovery, identify a first remote trusted device that supports trusted discovery;
during the trusted discovery, send a trusted discovery message to the first remote trusted device, the trusted discovery message to include: (a) security credentials for the computer system, (b) a first service hosted by the computer system, and (c) a second service hosted by a second remote trusted device;
access an acceptance message received from the first remote trusted device, the acceptance message to indicate an acceptance of the computer system to the trusted network, the trusted network including the first remote trusted device, and the acceptance message to include data identifying a third service hosted on the first remote trusted device; and
index the third service in a registry including fourth services available to the computer system and corresponding locations of the fourth services, the registry to be local to the computer system, and the fourth services in the registry to be opaque to devices that are not part of the trusted network.
21. The computer system of claim 20 , wherein the instructions further cause the one or more hardware processors to:
send a response to the first remote trusted device, the response to identify the fourth services available to the computer system, the first remote trusted device to index the fourth services in a second registry local to the first remote trusted device.
22. The computer system of claim 20 , wherein at least one of the fourth services available to the computer system is hosted on a third remote trusted device.
23. The computer system of claim 22 , wherein the instructions further cause the one or more hardware processors to:
identify a request to utilize the at least one of the fourth services;
generate a secure channel between the computer system and the third remote trusted device; and
provide access to the at least one of the fourth services through the secure channel.
24. The computer system of claim 20 , wherein the instructions further case the one or more hardware processors to:
identify a request to utilize the first service;
generate a secure channel between the computer system and the first remote trusted device; and
provide access to the first service through the secure channel.
25. The computer system of claim 20 , wherein the instructions further cause the one or more hardware processors to:
access a leave message received from the first remote trusted device; and
in response to the leave message, remove the third service from the registry.