Methods, systems, and products for measuring trust scores of devices

• US 8,726,344 B1
• Filed: 11/30/2005
• Issued: 05/13/2014
• Est. Priority Date: 11/30/2005
• Status: Expired due to Fees

• Current Assignee: Qurio Holdings Incorporated
• Original Assignee: Qurio Holdings Incorporated
• Inventors: Amidon, Christopher M., Walsh, Richard J., Issa, Alfredo C.
• Primary Examiner(s): Shaw, Yin-Chen
• Application Number:
  US11/290,897
• Time in Patent Office: 3,086 Days
• Field of Search: 713/150, 713/168, 726 1- 4, 726/10
• US Class Current: 726/2
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 7/02 Comparing digital values G06F7/06, G06F7/22, G06F7/38 take precedence
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Methods, systems, and products are disclosed for measuring trust. A device is encountered. A trust score for the device is calculated and compared to a threshold. The threshold may be a minimum trust score associated with the function. If the calculated trust score equals or exceeds the threshold, then the function is executed. If the calculated trust score is less than the threshold, then the function is denied.

Claims

1. A processor-implemented method of measuring trust of a first device from a second device, comprising:

receiving a communication from the first device that requests execution of a function within the second device;

calculating on the second device a trust score for the first device, the trust score calculated at least in part based on a physical distance between the first device and the second device and a measurement of a duration of an encounter between the first device and the second device, wherein the trust score is calculated prior to communicating a response to the first device;

retrieving a threshold trust score from a memory of the second device, the threshold trust score having a minimum trust score associated with the function;

comparing the calculated trust score to the threshold trust score;

if the calculated trust score equals or exceeds the threshold trust score, then executing the function; and

if the calculated trust score is less than the threshold trust score, then denying execution of the function.

2. The method according to claim 1, wherein the step of calculating the trust score comprises calculating a frequency component that stores and counts a number of previous encounters between the first device and the second device.

3. The method according to claim 1, wherein the step of calculating the trust score comprises calculating a longevity component that represents an average duration of all previous encounters between the first device and the second device.

4. The method according to claim 1, wherein the step of calculating the trust score comprises calculating a longevity component that represents a cumulative duration of all previous encounters between the first device and the second device.

5. The method according to claim 1, wherein. the step of calculating the trust score comprises calculating a geographic component, the geographic component defining a geographic zone from which encounters with devices are assigned a zonal trust score, the zonal trust score based on a time of day.

6. A system, comprising:

a memory;

a trust agent stored in the memory; and

a processor communicating with the memory,

the system receiving a communication from a first device that requests execution of function within the system;

the processor calculating a trust score for the first device, the trust score calculated at least in part based on a physical distance between the first device and the system and a measurement of a duration of an encounter between the first device and the system as a component of the trust score, wherein the trust score is calculated prior to communicating a response to the first device;

the processor retrieving a threshold trust score from the memory, the threshold trust score having a minimum trust score associated with the function;

the processor comparing the calculated trust score to the threshold trust score;

if the calculated trust score equals or exceeds the threshold trust score, then the trust agent permits execution of the function; and

if the calculated trust score is less than the threshold trust score, then the trust agent denies execution of the function.

7. The system according to claim 6, wherein the processor calculates a frequency component of the trust score that stores and counts a number of previous encounters between the first device and the system.

8. The system according to claim 6, wherein the processor calculates a longevity component of the trust score that represents an average duration of all previous encounters between the first device and a second device.

9. The system according to claim 6, wherein the processor calculates a longevity component of the trust score that represents a cumulative duration of all previous encounters between the first device and a second device.

10. The system according to claim 6, wherein the processor calculates a geographic component of the trust score, the geographic component defining a geographic zone from which encounters with devices are assigned a zonal trust score, the zonal trust score based on a time of day.

11. A computer program product comprising a non-transitory computer-readable medium storing instructions for performing the following steps:

receiving, on a second device, a communication from a first device that requests execution of a function within the second device;

calculating on the second device a trust score for the first device, the trust score calculated at least in part based on a physical distance between the first device and the second device and a measurement of a duration of an encounter between the first device and the second device as a component of the trust score, wherein the trust score is calculated prior to communicating a response to the first device;

retrieving a threshold trust score from a memory of the second device, the threshold trust score having a minimum trust score associated with the function;

comparing the calculated trust score to the threshold trust score;

if the calculated trust score equals or exceeds the threshold trust score, then executing the function; and

if the calculated trust score is less than the threshold trust score, then denying execution of the function.

12. The computer program product according to claim 11, further comprising instructions for calculating a frequency component of the trust score that stores and counts a number of previous encounters between the first device and the second device.

13. The computer program product according to claim 11, further comprising instructions for calculating a longevity component of the trust score, the longevity component representing at least one of i) an average duration of all previous encounters between the first device and the second device ii) a cumulative duration of all previous encounters between the first device and the second device.

14. The computer program product according to claim 11, further comprising the instructions for calculating a geographic component of the trust score, the geographic component defining a geographic zone from which encounters with devices are assigned a zonal trust score, the zonal trust score based on a time of day.

15. A processor-implemented method of measuring trust of a first device from a second device, comprising:

receiving a communication from the first device that requests execution of a function within the second device;

calculating on the second device a trust score for the first device, the trust score calculated at least in part based on a physical distance between the first device and the second device and a calculation of a longevity component that represents an average duration of all previous encounters between the first device and the second device, wherein the trust score is calculated prior to communicating a response to the first device;

retrieving a threshold trust score from a memory of the second device, the threshold trust score having a minimum trust score associated with the function;

comparing the calculated trust score to the threshold trust score;

if the calculated trust score equals or exceeds the threshold trust score, then executing the function; and

if the calculated trust score is less than the threshold trust score, then denying execution of the function.

16. A system, comprising:

a memory;

a trust agent stored in the memory; and

a processor communicating with the memory;

the system receiving a communication from a first device that requests execution of a function within the system;

the processor calculating a trust score for the first device, the trust score calculated at least in part based on a physical distance between the first device and the system and a calculation of a longevity component of the trust score that represents an average duration of all previous encounters between the first device and the system, wherein the trust score is calculated prior to communicating a response to the first device;

the processor retrieving a threshold trust score from the memory, the threshold trust score having a minimum trust score associated with the function;

the processor comparing the calculated trust score to the threshold trust score;

if the calculated trust score equals or exceeds the threshold trust score, then the trust agent permits execution of the execution of the function; and

if the calculated trust score is less than the threshold trust score, then the trust agent denies execution of the function.