Trusted container

1. At least one storage device or storage disk comprising instructions that, when executed on at least one processor, cause the at least one processor to, at least:

establish a secure connection between a domain and a client computing device;

receive, from the client computing device, a secure identifier corresponding to the client computing device, the secure identifier including a one-time password unique to a pairing of the client computing device and the domain, the secure identifier derived based at least in part on seed data received from the domain, the seed data separate from a domain identifier corresponding to the domain and unique to the pairing of the client computing device and the domain;

receive, from the client computing device, a container including security posture data corresponding to the client computing device bound to the secure identifier, the security posture data to identify attributes of the client computing device; and

perform a security task relating to an interaction of the client computing device with the domain.

2. The storage device or storage disk as defined in claim 1 , wherein the security task includes application of a security policy to the client computing device.

3. The storage device or storage disk as defined in claim 1 , wherein the instructions, when executed, cause the at least one processor to provide the domain identifier for authentication of the domain to the client computing device.

4. The storage device or storage disk as defined in claim 1 , wherein the instructions, when executed, cause the at least one processor to:

receive, from a second computing device, a second secure identifier for the second computing device, the second secure identifier of the second computing device derived from authentication data stored in secure memory of the second computing device;

receive, from the second computing device, second security posture data corresponding to the second computing device bound to the second secure identifier, the second security posture data to identify attributes of the second computing device; and

perform a security task relating to interaction of the second computing device with the domain.

5. A system comprising:

at least one processor;

memory in circuit with the at least one processor; and

a controller manager isolated from the at least one processor and to interact with a client computing device, the controller manager to:

negotiate a secure session with a client computing device;

provision seed data to the client computing device in response to the negotiation of the secure session, the seed data (a) separate from a domain identifier of a domain, (b) unique to a pairing of the client computing device and the domain, and (c) to be stored in a secure memory of the client computing device;

receive, from the client computing device, a secure identifier including a one-time password unique to the pairing of the client computing device and the domain, the secure identifier derived based at least in part on the seed data;

authenticate the client computing device using the one-time password; and

receive a secured container including the secure identifier and the security posture data from the client computing device.

6. The system as defined in claim 5 , further including a domain manager to apply at least one policy on the client computing device for a transaction based on the security posture data.

7. The system as defined in claim 5 , further including a policy manager to apply the at least one policy.

8. A method comprising:

establishing, by executing an instruction with at least one processor, a secure connection between a domain and a client computing device;

receiving from the client computing device, by executing an instruction with the at least one processor, a secure identifier corresponding to the client computing device, the secure identifier including a one-time password unique to a pairing of the client computing device and the domain, the secure identifier derived based at least in part on seed data received from the domain, the seed data separate from a domain identifier corresponding to the domain and unique to the pairing of the client computing device and the domain;

receiving from the client computing device, by executing an instruction with the at least one processor, a container including security posture data corresponding to the client computing device bound to the secure identifier, the security posture data to identify attributes of the client computing device; and

performing a security task relating to an interaction of the client computing device with the domain.

9. The method as defined in claim 8 , further including application of a security policy to the client computing device.

10. The method as defined in claim 8 , further including providing the domain identifier for authentication of the domain to the client computing device.

11. The method as defined in claim 8 , further including:

receiving, from a second computing device, a second secure identifier for the second computing device, the second secure identifier of the second computing device derived from authentication data stored in secure memory of the second computing device;

receiving second security posture data corresponding to the second computing device bound to the second secure identifier, the second security posture data to identify attributes corresponding to the second computing device; and

performing a security task relating to interaction of the second computing device with the domain.