Patent ID: 11863522
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 13:
14. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:
access an attestation token for an apparatus of a Border Gateway Protocol (BGP) network, wherein:
the attestation token is generated by a crypto-processor of the apparatus the crypto-processor is associated with internal counters, and configured to:
attest an attestation token to an identity of the apparatus and one or more running binaries corresponding to a valid chain of binary signatures on the apparatus to indicate that the apparatus is in a known safe state, wherein the attestation token is asynchronous and a unidirectional time-based variant; and
wherein the attestation token enables peer devices in the BGP network to validate that the apparatus is in the known safe state at a current time based on a state of the internal counters via the attestation token; and
the attestation token enables the peer devices in the BGP network to validate that the apparatus is in a known safe state at the current time, wherein the known safe state is based on an identity of the apparatus and one or more running binaries corresponding to the valid chain of binary signatures on the apparatus;
encode the attestation token as a canary stamp in a BGP signaling message wherein the encoding comprises: appending the canary stamp to the BGP signaling message; and sending the BGP signaling message with the encoded attestation token to a second apparatus of the BGP network for computing a trust level of the apparatus; and
compute a routing table of the BGP network using the trust level, wherein the routing table is updated based on the attestation token.