Method for protecting edge device trust score
One example method includes correlating trust scoring with authentication levels. Trust scores are protected in a computing system such that devices can be validated. Authentication levels are based on the verified trust scores.
1. A method, comprising:
generating a trust score for a device based on a workload performed by the device in a computing system and side channel profiles;
submitting a transaction request through an application to register the trust score of the device;
analyzing the trust score with endorsing peers that implement a ledger that stores immutable trust scores;
based on the analysis and whether the device deviates from the side channel profiles, increasing or decreasing the trust score;
receiving trust scores from endorsing peers for peer devices;
generating a validation block for the trust score of the device that validates the trust score; and
committing the trust score to the ledger.
2. The method of claim 1 , further comprising generating side channel profiles.
3. The method of claim 1 , wherein the side channel profiles include one or more of a boot profile, a socket profile, operational profile, operational profiles over a lifecycle of the device, a power consumption profile, or combination thereof.
4. The method of claim 1 , further comprising publishing the side channel profiles to the ledger.
5. The method of claim 1 , wherein validating the trust score includes receiving trust scores for the peer devices from other trusted networks or other ledgers.
6. The method of claim 1 , further comprising broadcasting trust scores of the peer devices to the ledger and/or other ledgers for validation.
7. The method of claim 1 , further comprising validating a trust score of a device in a different computing system.
8. A non-transitory computer readable medium comprising computer executable instructions for performing operations, the operations comprising:
generating a trust score for a device based on a workload performed by the device in a computing system and side channel profiles;
submitting a transaction request through an application to register the trust score of the device;
analyzing the trust score with endorsing peers that implement a ledger that stores immutable trust scores;
based on the analysis and whether the device deviates from the side channel profiles, increasing or decreasing the trust score;
receiving trust scores from endorsing peers for peer devices;
generating a validation block for the trust score of the device that validates the trust score; and
committing the trust score to the ledger.
9. The non-transitory computer readable medium of claim 8 , further comprising generating side channel profiles.
10. The non-transitory computer readable medium of claim 8 , wherein the side channel profiles include one or more of a boot profile, a socket profile, operational profile, operational profiles over a lifecycle of the device, a power consumption profile, or combination thereof.
11. The non-transitory computer readable medium of claim 8 , further comprising publishing the side channel profiles to the ledger.
12. The non-transitory computer readable medium of claim 8 , wherein validating the trust score includes receiving trust scores for the peer devices from other trusted networks or other ledgers.
13. The non-transitory computer readable medium of claim 8 , further comprising broadcasting trust scores of the peer devices to the ledger and/or other ledgers for validation.
14. The non-transitory computer readable medium of claim 8 , further comprising validating a trust score of a device in a different computing system.
15. A non-transitory computer readable medium comprising computer executable instructions for performing operations, the operations comprising:
receiving a trust score of a device connected to or joining a computing system, wherein the trust score was generated based on a workload performed by the device in the computing system and side channel profiles and the trust score was increased or decreased based on an analysis and whether the device deviated from the side channel profiles; and
trusting the device based on a trust between the computing system and a second computing system that was previously associated with the device or with a type of the device.
16. The non-transitory computer readable medium of claim 15 , further comprising validating the trust score with at least one ledger.
17. The non-transitory computer readable medium of claim 16 , wherein trust in the device in the computing system is based on one or more of trust scores of peer devices, trust scores stored by a security platform operating in the computing system, trust in devices connected to related computing systems, compliance of the device with profiles including a boot profile, or combination thereof.
18. The non-transitory computer readable medium of claim 16 , further comprising performing authentication in accordance with the validated trust score and requiring additional authentication when the trust score decreases or when the device does not comply with profiles stored in the at least one ledger.