System and method for a multi system trust chain
A trust chain having client system and a remote system in a secure connection, wherein an intermediary system associated with the network flow path serves as a signing entity to establish an end to end transitive trust. The intermediate system is a corroborative entity in the operations technology realm of the client system. The remote system serves as the host for a plurality of services in the information technology realm. A two way handshake during the initial secure exchange protocol between a local client application and a remote service is extended to a three way handshake that includes a nonce issued by the remote service on the remote system and a digital signature for the nonce issued by a signature service on an associated intermediate system. The nonce signature is verified authoritatively at the remote system based on the signing certificate of the intermediate system for explicit proof of association.
1. A method of establishing a trust chain traversing an intermediate system in a network flow path between a client application on a client system, a signature service on an intermediate system, and a remote service on a remote system, the method comprising:
parsing, by the intermediate system in the network flow path, a nonce issued by the remote service to the client application in a two-way handshake sequence to establish the trust chain between the client system and the remote system, thereby creating a parsed nonce;
generating, by the intermediate system, a dynamic rule to permit the two-way handshake sequence to establish a secure encrypted session;
receiving, by the intermediate system, a request from the client application to sign the nonce issued by the remote service;
correlating, by the intermediate system, the nonce issued by the remote service to the parsed nonce;
verifying, by the intermediate system, trust metrics of the client application attested to by a trust anchor on the client system, prior to signing the nonce;
updating, by the intermediate system, a dynamic rule to permit the secure encrypted session without inspection of, or modifications to, encrypted traffic between the client application and the remote service; and
establishing, by the intermediate system, a transitive trust chain between the client system and the remote system that traverses the intermediate system in the network flow path.
2. The method of claim 1 , wherein the dynamic rule includes a client system network internet protocol (IP) address, a remote system network (IP) address, a source port number, and a destination port number associated with the client application and the remote service respectively in the session.
3. The method of claim 1 , wherein the parsed nonce is associated with the dynamic rule on the intermediate system for session initiation between the client application and the remote service.
4. The method of claim 1 , wherein the trust metrics establish proof of trusted boot of the client system and trusted execution of the client application on the client system.
5. The method of claim 1 , wherein the parsed nonce associated with the established session is purged from the intermediate system to prevent reuse.
6. The method of claim 1 , wherein on termination of the session between the client application and the remote service, the associated dynamic rule is automatically deleted on the intermediate system.