Establishment of secure communication
Methods and apparatus for establishing enhanced secure communication between two Network Entities. A method performed by a first Network Entity (NE 1 ) to establish communication between the NE 1 and a second Network Entity (NE 2 ), wherein both NE 1 and NE 2 trust a Trusted Network Entity (TNE). The method comprises establishing an initial connection with the NE 2 , obtaining a report associated with NE 1 from TNE, wherein the report is signed by the TNE and providing the report associated with NE 1 to NE 2.
1. A method performed by a first Network Entity (NE 1 ) to establish communication between the NE 1 and a second Network Entity (NE 2 ), wherein both NE 1 and NE 2 trust a Trusted Network Entity (TNE), the method comprising:
establishing an initial connection between NE 1 and NE 2 ;
obtaining a report associated with NE 1 from TNE, the report being signed by the TNE, the report comprising an identity of NE 1 , a signature, and trust evaluation information (TEI) associated with NE 1 , the signature comprising a timestamp; and
providing the report associated with NE 1 to NE 2 .
2. The method according to claim 1 , wherein the report associated with NE 1 comprise a set of TEI associated with NE 1 that helps to establish the trust relationship between NE 1 and NE 2 , or wherein the report associated with NE 1 comprise a set of TEI associated with NE 1 that helps NE 2 to evaluate whether it is trustworthy to continue communication with NE 1 .
3. The method according to claim 1 , wherein the TEI associated with NE 1 comprises at least one of:
secure boot information of NE 1 ,
measured boot information of NE 1 ,
remote attestation information of NE 1 ,
Highest Common Vulnerabilities and Exposer (CVE) score of NE 1 ,
trust index of NE 1 , and a risk index of NE 1 .
4. The method according to claim 1 , further comprising receiving from NE 2 a message of whether to continue communication with NE 1 .
5. The method according to claim 1 , further comprising sending to NE 2 or TNE a request for providing a report associated with NE 2 , wherein the report is signed by the TNE.
6. A method performed by a second Network Entity (NE 2 ) to establish communication between a first Network Entity (NE 1 ) and the NE 2 , wherein both NE 1 and NE 2 trust a Trusted Network Entity (TNE), the method comprising:
establishing an initial connection between NE 2 and NE 1 ;
obtaining a report associated with NE 1 , the report being signed by TNE, the report comprising an identity of NE 1 , a signature, and trust evaluation information (TEI) associated with NE 1 , the signature comprising a timestamp; and
verifying the report associated with NE 1 .
7. The method according to claim 6 , wherein the report associated with NE 1 comprise a set of TEI associated with NE 1 that helps to establish the trust relationship between NE 1 and NE 2 , or wherein the report associated with NE 1 comprise a set of TEI associated with NE 1 that helps NE 2 to evaluate whether it is trustworthy to continue communication with NE 1 .
8. The method according to claim 6 , wherein the TEI associated with NE 1 comprises at least one of:
secure boot information of NE 1 ,
measured boot information of NE 1 ,
remote attestation information of NE 1 ,
Highest Common Vulnerabilities and Exposer (CVE) score of NE 1 ,
a trust index of NE 1 , and
risk index of NE 1 .
9. The method according to claim 6 , further comprising sending a message of whether to continue communication with NE 1 to NE 1 .
10. A method performed by a Trusted Network Entity (TNE), the method comprising:
obtaining a set of trust evaluation information of a Network Entity (NE); and
generating a report associated with the NE, the report being signed by the TNE, the report comprising an identity of the NE, a signature, and trust evaluation information (TEI) associated with the NE, the signature comprising a timestamp.
11. The method according to claim 10 , wherein the report associated with the NE comprises a set of trust evaluation information associated with the NE that helps to establish the trust relationship between the NE and another NE, or wherein the report associated with the NE comprises a set of trust evaluation information associated with the NE that helps another NE to evaluate whether it is trustworthy to continue communication with the NE.
12. The method according to claim 10 , wherein the TEI associated with the NE comprises at least one of:
secure boot information of the NE,
measured boot information of the NE,
remote attestation information of the NE,
Highest Common Vulnerabilities and Exposer (CVE) score of the NE,
a trust index of the NE, and
a risk index of the NE.
13. The method according to claim 10 , further comprising providing the report associated with the NE to the NE or to another NE.