Patent ID: 11917080
Assignee: MCAFEE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. One or more tangible, non-transitory computer-readable storage media having stored thereon executable instructions to provide a network gateway, the instructions to:
communicatively couple to a network via a network interface;
provide, for endpoint devices on the network, a set of services, including at least one security service;
identify a first endpoint device of the network;
securely receive from the first endpoint device a security posture assessment token (SPAT), the SPAT comprising a data structure attesting that the first endpoint device includes a trusted execution environment (TEE) and a trusted agent that provides at least one security function from the set of services;
cryptographically verify that the SPAT was signed by an authorized key of the first endpoint device;
assign to the endpoint device a first network security policy according to content of the SPAT, wherein the first network security policy includes offloading the at least one security function to the endpoint device;
determining that a second endpoint device lacks a TEE; and
Performing the full set of services for the second endpoint device.