Enriching local cryptoprocessor queries with sdn augmented information
The present technology discloses a method for enriching local crypto-processor queries with software-defined networking augmented information, comprising sending, from a virtual machine installed on a physical host, a request for trust verification data; augmenting, by an identity verification system on the physical host, the request for trust verification data with encrypted information from an external entity; receiving, at a trusted processor module on the physical host, the request for trust verification data; receiving, at the virtual machine, the trust verification data; and assessing, at the virtual machine, a state of the physical host based on the trust verification data.
1. A method for enriching local crypto-processor queries with software-defined networking augmented information, the method comprising:
sending, from a virtual machine installed on a physical host, a request for trust verification data;
augmenting, by an identity verification system on the physical host, the request for trust verification data with encrypted information from an external entity;
receiving, at a trusted platform module on the physical host, the request for trust verification data;
receiving, at the virtual machine, the trust verification data; and
assessing, at the virtual machine, a state of the physical host based on the trust verification data.
2. The method of claim 1 , wherein the external entity comprises a network controller.
3. The method of claim 2 , wherein the encrypted information from the network controller comprises network data.
4. The method of claim 1 , wherein the trust verification data comprises platform configuration registers and their timestamps.
5. The method of claim 1 , further comprising:
requesting, by the identity verification system, the encrypted information from the external entity; and
receiving, at the identity verification system, the encrypted information from the external entity.
6. The method of claim 1 , wherein the encrypted information from the external entity comprises prior trust verification data.
7. The method of claim 1 , wherein the trust verification data comprises host data gathered on the physical host.
8. A system for enriching local crypto-processor queries with software-defined networking augmented information, the system comprising:
a virtual machine installed on a physical host, wherein the virtual machine is configured to request and receive trust verification data;
an external entity, wherein the external entity is configured to send encrypted information;
an identity verification system installed on the physical host, wherein the identity verification system is configured is configured to augment a request for trust verification data; and
a trusted platform module on the physical host, wherein the trusted platform module is configured to generate the trust verification data.
9. The system of claim 8 , wherein the external entity comprises a network controller.
10. The system of claim 9 , wherein the encrypted information from the network controller comprises network data.
11. The system of claim 8 , wherein the trust verification data comprises platform configuration registers and their timestamps.
12. The system of claim 8 , wherein the identity verification system is configured to request and receive the encrypted information from the external entity.
13. The system of claim 8 , wherein the encrypted information comprises prior trust verification data.
14. The system of claim 8 , wherein the trust verification data comprises host data gathered on the physical host.
15. A non-transitory computer readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:
send, from a virtual machine installed on a physical host, a request for trust verification data;
augment, by an identity verification system on the physical host, the request for trust verification data with encrypted information from an external entity;
receive, at a trusted platform module on the physical host, the request for trust verification data;
receive, at the virtual machine, the trust verification data; and
assess, at the virtual machine, a state of the physical host based on the trust verification data.
16. The non-transitory computer readable medium of claim 15 , wherein the external entity is a network controller.
17. The non-transitory computer readable medium of claim 16 , wherein the encrypted information from the network controller comprises network data.
18. The non-transitory computer readable medium of claim 15 , wherein the trust verification data comprises platform configuration registers and their timestamps.
19. The non-transitory computer readable medium of claim 15 , wherein the instructions further cause the one or more processors to:
request, by the identity verification system, the encrypted information from the external entity; and
receive, at the identity verification system, the encrypted information from the external entity.
20. The non-transitory computer readable medium of claim 15 , wherein the encrypted information from the external entity comprises prior trust verification data, and the trust verification data comprises host data gathered on the physical host.