Patent ID: 11917080
Assignee: MCAFEE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A network gateway device, comprising:
a hardware platform comprising a processor and a memory;
a network interface, including network interface hardware; and
instructions encoded within the memory to instruct the processor to:
provide a set of services, including security services, to endpoint devices on a network;
determine that a first endpoint device, being an untrusted device, lacks a trusted execution environment (TEE), and assign the first endpoint device a first network security policy comprises providing in full the set of services to the untrusted device;
receive from a second endpoint device having a TEE, via the network interface, a signed security posture data structure, the signed security posture data structure attesting that the endpoint device includes a trusted agent that provides at least one security service from the set of available services;
cryptographically verify the signed security posture data structure; and
according to the signed security posture data structure, assign a second network security policy to the endpoint device, wherein the second network security policy omits the at least one security service from the set of services.