Trust Evaluation

• US 20090006597A1
• Filed: 02/16/2007
• Published: 01/01/2009
• Est. Priority Date: 02/16/2006
• Status: Active Grant

• Current Assignee: Andrew G. Kegel, Leendert P Van Doorn, Steven A. Bade
• Original Assignee: Andrew G. Kegel, Leendert P Van Doorn, Steven A. Bade
• Inventors: Bade, Steven A., Kegel, Andrew G., Van Doorn, Leendert P.
• Granted Patent: US 7,809,821 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 11/3409 for performance assessment
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2201/81 Threshold

Abstract

A solution for evaluating trust in a computer infrastructure is provided. In particular, a plurality of computing devices in the computer infrastructure evaluate one or more other computing devices in the computer infrastructure based on a set of device measurements for the other computing device(s) and a set of reference measurements. To this extent, each of the plurality of computing devices also provides a set of device measurements for processing by the other computing device(s) in the computer infrastructure.

Claims

1-20. -20. (canceled)

21. A computer infrastructure comprising:

a computing device including;

a system for managing a set of computing devices in the computer infrastructure that evaluate a trustworthiness of one another, the system for managing including at least one of;

a system for managing membership in a sub-group of the computer infrastructure or a system for managing a trust level for communications between another computing device in the computer infrastructure and other computing devices.

22. The computer infrastructure of claim 21, the computing device further including a system for providing device measurements for the computing device for processing by another computing device in the computer infrastructure.

23. The computer infrastructure of claim 21, the computing device further including a system for evaluating another computing device in the computer infrastructure based on a set of device measurements for the another computing device and a set of reference measurements.

24. The computer infrastructure of claim 21, the system for managing membership in a sub-group of the computer infrastructure including:

a system for detecting that a threshold number of computing devices has been exceeded for at least one of;

the computer infrastructure or a sub-group of the computer infrastructure; and

a system for dividing the at least one of;

the computer infrastructure or the sub-group of the computer infrastructure into a plurality of sub-groups of computing devices for evaluating trust.

25. The computer infrastructure of claim 24, the system for dividing assigning at least one computing device in the computer infrastructure to a plurality of sub-groups.

26. The computer infrastructure of claim 24, wherein the threshold number is selected based on an impact of the monitoring on a performance of a primary function of each computing device.

27. The computer infrastructure of claim 21, the system for managing membership in a sub-group of the computer infrastructure including:

a system for detecting that a number of computing devices in a sub-group of the computer infrastructure has fallen below a threshold number; and

a system for reassigning each computing device in the sub-group to a new sub-group.

28. The computer infrastructure of claim 27, wherein the new sub-group includes at least one computing device that is included in at least one additional sub-group.

29. The computer infrastructure of claim 21, wherein the system for managing a trust level for communications between another computing device in the set of computing devices and other computing devices isolates a particular computing device from communicating with other computing devices in response to a failure of the particular computing device.

30. A computer infrastructure comprising:

a computing device including;

a system for managing a set of computing devices in the computer infrastructure that evaluate a trustworthiness of one another, the system for managing including a system for managing membership in a sub-group of the computer infrastructure.

31. The computer infrastructure of claim 30, the system for managing a set of computing devices further including a system for managing a trust level for communications between another computing device in the computer infrastructure and other computing devices.

32. The computer infrastructure of claim 30, the system for managing membership in a sub-group of the computer infrastructure including:

a system for detecting that a threshold number of computing devices has been exceeded for at least one of;

the computer infrastructure or a sub-group of the computer infrastructure; and

a system for dividing the at least one of;

the computer infrastructure or the sub-group of the computer infrastructure into a plurality of sub-groups of computing devices for evaluating trust.

33. The computer infrastructure of claim 32, the system for dividing assigning at least one computing device in the computer infrastructure to a plurality of sub-groups.

34. The computer infrastructure of claim 32, wherein the threshold number is selected based on an impact of the monitoring on a performance of a primary function of each computing device.

35. The computer infrastructure of claim 30, the system for managing membership in a sub-group of the computer infrastructure including:

a system for detecting that a number of computing devices in a sub-group of the computer infrastructure has fallen below a threshold number; and

a system for reassigning each computing device in the sub-group to a new sub-group.

36. The computer infrastructure of claim 35, wherein the new sub-group includes at least one computing device that is included in at least one additional sub-group.

37. A computer infrastructure comprising:

a computing device including;

a system for managing a set of computing devices in the computer infrastructure that evaluate a trustworthiness of one another, the system for managing including a system for managing a trust level for communications between another computing device in the computer infrastructure and other computing devices.

38. The computer infrastructure of claim 37, wherein the system for managing a trust level for communications between another computing device in the set of computing devices and other computing devices isolates a particular computing device from communicating with other computing devices in response to a failure of the particular computing device.

39. The computer infrastructure of claim 37, the system for managing a set of computing devices further including a system for enabling a user to modify a set of reference measurements used to determine a corresponding trust level for a computing device.

40. The computer infrastructure of claim 37, the system for managing a set of computing devices further including a system for communicating an updated set of reference measurements to other computing devices in the computer infrastructure.