Lattice mesh
A system for a lattice mesh comprises an interface and a processor. The interface is configured to receive a request to register from a host, wherein the request to register includes a key and a set of asset IDs that the host wishes to claim. The processor is configured to sign the key to generate a resource authority (RA) certificate signed key with an RA certificate; update an asset database with the RA certificate signed key; distribute the RA certificate signed host public key through the network; and provide the host with the RA certificate signed key. In some embodiments, the system further comprises a memory that is coupled to the processor and configured to provide the processor with instructions.
1. A system for a lattice mesh, comprising:
an interface configured to receive a request to register from a host, wherein the request to register includes a key and a set of asset IDs that the host wishes to claim;
a processor configured to;
sign the key to generate an Resource Authority (RA) certificate signed key with an RA certificate;
update an asset database with the RA certificate signed key;
distribute the RA certificate signed key through the network; and
provide the host with the RA certificate signed key.
2. The system as in claim 1 , wherein a message is encoded using a group key or a host public key in the asset database, wherein encoding the message comprises encrypting the message using the group key or signing the message using the host public key.
3. The system as in claim 2 , wherein the message is sent to another node or published to multiple nodes after encoding.
4. The system as in claim 1 , wherein a message is decoded using a group key or a host public key in the asset database.
5. The system as in claim 4 , wherein the message was sent specifically to one node or published to multiple nodes.
6. The system as in claim 1 , wherein the interface and the processor belong to a hub.
7. The system as in claim 6 , wherein the hub includes a resource authority.
8. The system as in claim 7 , wherein the resource authority includes a certificate authority.
9. The system as in claim 7 , wherein the resource authority includes a key store.
10. The system as in claim 9 , wherein the key store stores keys in a hardware security module.
11. The system as in claim 7 , wherein the resource authority includes an asset database.
12. The system as in claim 7 , wherein the resource authority includes a host to claim map.
13. The system as in claim 7 , wherein the resource authority includes an asset database sharer.
14. The system as in claim 1 , wherein the host includes a host service.
15. The system as in claim 14 , wherein the host service includes a registration requestor.
16. The system as in claim 14 , wherein the host service includes a key store.
17. The system as in claim 16 , wherein the key store stores keys in a hardware security module.
18. The system as in claim 14 , wherein the host service includes an asset database.
19. The system as in claim 14 , wherein the host service includes an asset database sharer.
20. A method for a lattice mesh, comprising:
receiving a request to register from a host, wherein the request to register includes a host public key and a set of asset IDs that the host wishes to claim;
signing, using a processor, the key to generate an RA certificate signed key with an RA certificate;
updating an asset database with the RA certificate signed key;
distributing the RA certificate signed key through the network; and
providing the host with the RA certificate signed key.
21. A computer program product for a lattice mesh, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:
receiving a request to register from a host, wherein the request to register includes a key and a set of asset IDs that the host wishes to claim;
signing the key to generate an RA certificate signed key with an RA certificate;
updating an asset database with the RA certificate signed key;
distributing the RA certificate signed key through the network; and
providing the host with the RA certificate signed key.