Trust agents
Systems and techniques are provided for trust agents. Trust agents may be enabled. A state determination may be received from each of the enabled trust agents. The state determination may indicate either a trusted state or an untrusted state. The received state determinations may be combined to determine a security state. A security measure may be enabled or disabled based on the determined security state.
1. A computing device comprising:
at least one processor;
a memory storing program instructions, which when executed by the at least one processor, cause the at least one processor to:
receive a security state from at least one trust agent on the computing device;
receive a state determination from the at least one trust agent, wherein the state determination indicates either a trusted state or an untrusted state;
determine a security state for the computing device based on the at least one trust agent indicating the untrusted state; and
cause the computing device to enter a locked state and display an indication of the at least one trust agent indicating the untrusted state.
2. The computing device of claim 1 , wherein the at least one trust agent is implemented in hardware on the computing device.
3. The computing device of claim 1 , wherein the at least one trust agent is implemented in a combination of hardware and software on the computing device.
4. The computing device of claim 1 , wherein the at least one trust agent is configured to make the state determination based on sensor data from one or more hardware sensors.
5. The computing device of claim 1 , wherein the at least one trust agent is configured to make the state determination based on sensor data from a combination of at least one hardware sensor and at least one software sensor.
6. The computing device of claim 1 , wherein the program instructions are executable by the at least one processor to cause the computing device to enter the locked state after waking the computing device from a sleep state.
7. The computing device of claim 1 , wherein the program instructions are executable by the at least one processor to cause the computing device to enter the locked state after a hardware power button of the computing device is pressed.
8. The computing device of claim 1 , wherein the program instructions are executable by the at least one processor to cause the computing device to display a graphical icon indicating that the computing device has entered the locked state.
9. The computing device of claim 8 , wherein the graphical icon is depicted as a lock icon.
10. The computing device of claim 1 , wherein the computing device comprises a smartphone.
11. The computing device of claim 1 , wherein the at least one trust agent is enabled or disabled based on user input, wherein a state determination is not received from a disabled trust agent.
12. The computing device of claim 1 , wherein the at least one trust agent comprises a plurality of trust agents, and wherein each of the plurality of trust agents does not communicate a state determination directly to any other trust agent of the plurality of trust agents.
13. The computing device of claim 1 , wherein the at least one trust agent comprises a plurality of trust agents each configured to make a state determination based on a different sensor of the computing device.
14. The computing device of claim 1 , wherein the at least one trust agent comprises a first trust agent configured to make a state determination based on sensor data from a first sensor and a second sensor, and a second trust agent configured to make a state determination based on sensor data from the second sensor and a third sensor.
15. The computing device of claim 1 , wherein the program instructions are executable by the at least one processor to cause the computing device to display an indication of at least one sensor that was the basis for the determined security state.
16. The computing device of claim 1 , wherein the program instructions are executable by the at least one processor to determine the security state for the computing device by combining received state determinations from the at least one trust agent by ORing, ANDing or AND NOTing the state determinations.
17. A method comprising:
receiving a security state from at least one trust agent on a computing device;
receiving a state determination from the at least one trust agent, wherein the state determination indicates either a trusted state or an untrusted state;
determining a security state for the computing device based on the at least one trust agent indicating the untrusted state; and
causing the computing device to enter a locked state and display an indication of the at least one trust agent indicating the untrusted state.
18. The method of claim 17 , wherein determining the security state for the computing device based on the at least one trust agent indicating the untrusted state is performed by a trust agent manager, wherein the trust agent manager is a component of an operating system of the computing device.
19. The method of claim 17 , further comprising causing the computing device to display the security state of the computing device and a reason for the security state of the computing device.
20. A computer readable medium storing program instructions executable by at least one processor to cause performance of operations comprising:
receiving a security state from at least one trust agent on a computing device;
receiving a state determination from the at least one trust agent, wherein the state determination indicates either a trusted state or an untrusted state;
determining a security state for the computing device based on the at least one trust agent indicating the untrusted state; and
causing the computing device to enter a locked state and display an indication of the at least one trust agent indicating the untrusted state.