Systems and methods for providing attestation of data integrity
Disclosed is a method of establishing secure communications. The method includes receiving an attestation parameter associated with a first peer in a potential peer-to-peer communication, adding the attestation parameter to an MACsec Key Agreement (MKA) protocol key exchange, transmitting the key exchange from the first peer to a second peer in the potential peer-to-peer communication and upon a validation of the attestation parameter by the second peer, enabling secure communication between the first peer and the second peer.
1. A method comprising:
receiving an attestation parameter associated with a first peer in a potential peer-to-peer communication;
adding the attestation parameter to a MACsec Key Agreement (MKA) protocol key exchange, wherein adding the attestation parameter to the MKA protocol key exchange further comprises adding the attestation parameter to a SecTAG header of a MACsec protocol;
transmitting the MKA protocol key exchange from the first peer to a second peer in the potential peer-to-peer communication; and
upon a validation of the attestation parameter by the second peer, enabling secure communication between the first peer and the second peer.
2. The method of claim 1 , wherein the validation of the attestation parameter by the second peer causes the second peer to transition to a live peer mode.
3. The method of claim 2 , further comprising:
after establishing the live peer mode for the second peer to engage in the secure communication, confirming the secure communication via an exchange of a second MKA protocol key exchange having a second attestation parameter added thereto.
4. The method of claim 1 , wherein one of the first peer or the second peer comprises a router in a network.
5. The method of claim 1 , wherein the attestation parameter is configured in a new SecTAG extension header.
6. The method of claim 5 , wherein the new SecTAG extension header having the attestation parameter is part of a MACsec header.
7. A system comprising:
a processor; and
a computer-readable storage device storing instructions which, when executed by the processor, causes the processor to perform operations comprising:
receiving an attestation parameter associated with a first peer in a potential peer-to-peer communication;
adding the attestation parameter to a MACsec Key Agreement (MKA) protocol key exchange, wherein adding the attestation parameter to the MKA protocol key exchange further comprises adding the attestation parameter to a SecTAG header of a MACsec protocol;
transmitting the MKA protocol key exchange from the first peer to a second peer in the potential peer-to-peer communication; and
upon a validation of the attestation parameter by the second peer, enabling secure communication between the first peer and the second peer.
8. The system of claim 7 , wherein the validation of the attestation parameter by the second peer causes the second peer to transition to a live peer mode.
9. The system of claim 8 , further comprising:
after establishing the live peer mode for the second peer to engage in the secure communication, confirming the secure communication via an exchange of a second MKA protocol key exchange having a second attestation parameter added thereto.
10. The system of claim 7 , wherein one of the first peer or the second peer comprises a router in a network.
11. The system of claim 7 , wherein the attestation parameter is configured in a new SecTAG extension header.
12. The system of claim 11 , wherein the new SecTAG extension header having the attestation parameter is part of a MACsec header.
13. A computer-readable storage device storing instructions which, when executed by a processor, causes the processor to perform operations comprising:
receiving an attestation parameter associated with a first peer in a potential peer-to-peer communication;
adding the attestation parameter to a MACsec Key Agreement (MKA) protocol key exchange, wherein adding the attestation parameter to the MKA protocol key exchange further comprises adding the attestation parameter to a SecTAG header of a MACsec protocol;
transmitting the key exchange from the first peer to a second peer in the potential peer-to-peer communication; and
upon a validation of the attestation parameter by the second peer, enabling secure communication between the first peer and the second peer.
14. The computer-readable storage device of claim 13 , wherein the validation of the attestation parameter by the second peer causes the second peer to transition to a live peer mode.
15. The computer-readable storage device of claim 14 , further comprising:
after establishing the live peer mode for the second peer to engage in the secure communication, confirming the secure communication via an exchange of a second MKA protocol key exchange having a second attestation parameter added thereto.
16. The computer-readable storage device of claim 13 , wherein one of the first peer or the second peer comprises a router in a network.
17. The computer-readable storage device of claim 13 , wherein the attestation parameter is configured in a new SecTAG extension header.