Patent ID: 11924223
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method comprising:
receiving a packet comprising one or more metadata elements generated based on security measurements of one or more nodes along a path of the packet, the one or more security measurements being indicative of one or more of software and hardware integrity at the one or more nodes along the path;
inspecting an in-situ operations, administration, and management data field of the packet to determine a validity of the one or more metadata elements, the inspecting including at least one of a comparison of one or more values in the one or more metadata elements with one or more expected values calculated for the one or more metadata elements, one or more signatures in the one or more metadata elements, and timing information associated with the one or more metadata elements; and
based on the one or more metadata elements, determining whether a node from the one or more nodes comprises a compromised node, wherein at least one of a data element in the one or more metadata elements and the one or more signatures in the one or more metadata elements are generated by one or more trusted execution environments (TEE) or one or more trusted platform modules (TPMs) implemented by the node or one or more cryptoprocessors implemented by the node.