PEER-TO-PEER SECURITY STATUS DETECTION
Disclosed are various approaches for peer-to-peer device security detection. In some examples, a first client device transmits verification data to a second client device. The verification data includes a public key verification certificate of the client device, and a time-based session token generated by the first client device. The first client device receives a preliminary cross-comparison package from the second client device. The preliminary package includes a spoof-check token, and peer device context data of the second client device. The first client device generates a cross-comparison package using the preliminary cross-comparison package and local device context data of the first client device, and transmits the cross-comparison package to a management service for cross-comparison.
1 . A non-transitory computer-readable medium comprising machine-readable instructions, wherein the instructions, when executed by at least one processor, cause at least one computing device to at least:
transmit, from a first client device to a second client device, verification data comprising: a public key verification certificate of the first client device, and a time-based session token generated by the first client device;
receive, by the first client device from the second client device, a preliminary cross-comparison package comprising: a spoof-check token, and peer device context data of the second client device;
generate, by the first client device, a cross-comparison package based on the preliminary cross-comparison package and local device context data of the first client device; and
transmit, by the first client device, the cross-comparison package to a management service for cross-comparison, the cross-comparison package comprising: the local device context data, the spoof-check token, and the peer device context data.
2 . The non-transitory computer-readable medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one computing device to at least:
detect, by the first client device, that the second client device is accessible for peer-to-peer communications over a network.
3 . The non-transitory computer-readable medium of claim 1 , wherein the preliminary cross-comparison package is encrypted using a private key uniquely assigned to the second client device by the management service.
4 . The non-transitory computer-readable medium of claim 1 , wherein the cross-comparison package is encrypted using a private key uniquely assigned to the first client device by the management service.
5 . The non-transitory computer-readable medium of claim 1 , wherein the spoof-check token is an encrypted version of the time-based session token, which is encrypted by the management service to form the spoof-check token prior to being received by the second client device from the first client device.
6 . The non-transitory computer-readable medium of claim 1 , wherein the local device context data comprises at least one of: location data of the first client device, sensor data of the first client device, and network data of the first client device.
7 . The non-transitory computer-readable medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one computing device to at least:
receive, from the management service, a command to perform a remedial action.
8 . A system, comprising:
at least one computing device comprising at least one processor; and
a memory comprising machine-readable instructions, wherein the instructions, when executed by the at least one processor, cause the at least one computing device to at least:
transmit, from a first client device to a second client device, verification data comprising: a public key verification certificate of the first client device, and a time-based session token generated by the first client device;
receive, by the first client device from the second client device, a preliminary cross-comparison package comprising: a spoof-check token, and peer device context data of the second client device;
generate, by the first client device, a cross-comparison package based on the preliminary cross-comparison package and local device context data of the first client device; and
transmit, by the first client device, the cross-comparison package to a management service for cross-comparison, the cross-comparison package comprising: the local device context data, the spoof-check token, and the peer device context data.
9 . The system of claim 8 , wherein the instructions, when executed by the at least one processor, cause the at least one computing device to at least:
detect, by the first client device, that the second client device is accessible for peer-to-peer communications over a network.
10 . The system of claim 8 , wherein the preliminary cross-comparison package is encrypted using a private key uniquely assigned to the second client device by the management service.
11 . The system of claim 8 , wherein the cross-comparison package is encrypted using a private key uniquely assigned to the first client device by the management service.
12 . The system of claim 8 , wherein the spoof-check token is an encrypted version of the time-based session token, which is encrypted by the management service to form the spoof-check token prior to being received by the second client device from the first client device.
13 . The system of claim 8 , wherein the peer device context data comprises at least one of: location data of the second client device, sensor data of the second client device, and network data of the second client device.
14 . The system of claim 8 , wherein the instructions, when executed by the at least one processor, cause the at least one computing device to at least:
receive, from the management service, a command to perform a remedial action.
15 . A method comprising:
transmitting, from a first client device to a second client device, verification data comprising: a public key verification certificate of the first client device, and a time-based session token generated by the first client device;
receiving, by the first client device from the second client device, a preliminary cross-comparison package comprising: a spoof-check token, and peer device context data of the second client device;
generating, by the first client device, a cross-comparison package based on the preliminary cross-comparison package and local device context data of the first client device; and
transmitting, by the first client device, the cross-comparison package to a management service for cross-comparison, the cross-comparison package comprising: the local device context data, the spoof-check token, and the peer device context data.
16 . The method of claim 15 , further comprising:
detecting, by the first client device, that the second client device is accessible for peer-to-peer communications over a network.
17 . The method of claim 15 , wherein the preliminary cross-comparison package is encrypted using a private key uniquely assigned to the second client device by the management service.
18 . The method of claim 15 , wherein the cross-comparison package is encrypted using a private key uniquely assigned to the first client device by the management service.
19 . The method of claim 15 , wherein the spoof-check token is an encrypted version of the time-based session token, which is encrypted by the management service to form the spoof-check token prior to being received by the second client device from the first client device.
20 . The method of claim 15 , wherein the local device context data and the peer device context data comprise at least one of: location data, sensor data, and network data.