Patent ID: 11917080
Assignee: MCAFEE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 17:
18. An endpoint device, comprising:
a hardware platform comprising a processor and a memory;
a network interface;
a trusted execution environment (TEE);
an operating system;
security agent software; and
instructions encoded within the memory to instruct the processor to:
receive from a certificate authority an endpoint certificate;
store a private key for the endpoint certificate in the TEE;
enumerate capabilities of the endpoint device, including a capability to perform a network security function on the endpoint device, wherein the network security function may also be performed by a gateway device;
create a security posture data structure according to the enumerated capabilities;
sign the security posture data structure with the private key;
detect an advertised gateway;
provisionally connect to the gateway;
negotiate a mutual authentication with the gateway;
provide the signed security posture data structure to the gateway; and
receive from the gateway a security policy that omits performing the network security function on the gateway, and instructs the endpoint device to perform the network security function for itself.