Verified social media content
In an example, there is a disclosed a computing apparatus, including: a psychological state data interface to receive psychological state data; one or more logic elements, including at least one hardware element, including a verification engine to: receive a requested user action; receive a psychological state input via the psychological state data interface; analyze the psychological state input; and bar the requested user action at least partly responsive to the analyzing.
1. A data loss prevention (DLP) server, comprising:
a processor;
a trusted input/output (IO) interface to communicatively couple to a user device;
a social media interface to communicatively couple to a social media service;
a trusted execution environment (TEE); and
a memory having stored thereon executable instructions to instruct the processor to provide a DLP engine to:
receive from the user device via the trusted IO interface a signed and encrypted user posting for the social media service, the user posting including a signed user state report verifying that the user has passed a biometric screening;
cryptographically verify the signed and encrypted user posting comprising performing attestation with a source device of the signed and encrypted user posting; and
responsive to a successful attestation, submit the user posting on behalf of the user to the social media service via the social media interface.
2. The DLP server of claim 1 , wherein the trusted I/O interface includes a protected audio video path (PAVP).
3. The DLP server of claim 1 , wherein the DLP engine is further to perform a DLP scan of the user posting's content, and to deny the user posting if inappropriate content is found.
4. The DLP server of claim 3 , wherein the DLP scan comprises a natural language text scan.
5. The DLP server of claim 4 , wherein the natural language text scan comprises a scan for abusive or hateful statements.
6. The DLP server of claim 3 , wherein the DLP scan comprises image or voice recognition.
7. The DLP server of claim 3 , wherein the DLP scan comprises a scan for proprietary enterprise data.
8. The DLP server of claim 1 , wherein the DLP engine is to perform direct anonymous attestation (DAA) with the user device to authenticate the user device.
9. The DLP server of claim 8 , wherein the DAA comprises an exchange of endorsement keys.
10. The DLP server of claim 1 , wherein the TEE comprises a zero-knowledge proof engine to authenticate the user device without compromising privacy of the user device.
11. One or more tangible, non-transitory computer-readable storage mediums having stored thereon executable instructions to provide a data loss prevention (DLP) server to:
establish a trusted communication interface with an end-user device;
establish an authenticated interface with a social media service;
receive via the trusted communication interface a cryptographically-signed end-user state report and an end-user posting for the social media service;
cryptographically verify the signed end-user state report comprising performing direct anonymous attestation with a source device of the signed end-user state report; and
responsive to the direct anonymous attestation, submit the end-user posting to the social media service.
12. The one or more tangible, non-transitory computer-readable mediums of claim 11 , wherein the trusted communication interface includes a protected audio video path (PAVP).
13. The one or more tangible, non-transitory computer-readable mediums of claim 11 , wherein the DLP engine is further to perform a DLP scan of the end-user posting's content, and to reject the end-user posting if inappropriate content is found.
14. The one or more tangible, non-transitory computer-readable mediums of claim 11 , wherein the DLP engine is further to authenticate the end-user device via direct anonymous attestation (DAA).
15. The one or more tangible, non-transitory computer-readable mediums of claim 11 , wherein the instructions are further to provide a zero-knowledge proof engine to authenticate the end-user device without compromising privacy of the end-user device.
16. A computerized data loss prevention (DLP) method, comprising:
establishing secure communication with a client device;
authenticating to a social media platform on behalf of a user of the client device;
receiving from the client device, via a secure communication channel, a signed and encrypted user state report, and a posting for the social media service;
cryptographically verifying the signed and encrypted user state report comprising performing attestation with a source device of the signed and encrypted user state report; and
responsive to the attestation, submitting the posting to the social media service on behalf of the user.
17. The method of claim 16 , wherein establishing secure communication with the client device comprises establishing a protected audio video path (PAVP).
18. The method of claim 16 , further comprising performing a DLP scan of the posting's content, and rejecting the posting if inappropriate content is found.
19. The method of claim 16 , further comprising authenticating the client device via direct anonymous attestation (DAA).
20. The method of claim 16 , further comprising operating a zero-knowledge proof engine to authenticate the client device without compromising privacy of the client device.