Patent ID: 11863522
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. An apparatus of a Border Gateway Protocol (BGP) network, the apparatus comprising:
one or more processors;
a crypto-processor associated with internal counters, and configured to:
attest an attestation token to an identity of the apparatus and one or more running binaries corresponding to a valid chain of binary signatures on the apparatus to indicate that the apparatus is in a known safe state, wherein the attestation token is asynchronous and a unidirectional time-based variant; and
wherein the attestation token enables peer devices in the BGP network to validate that the apparatus is in the known safe state at a current time based on a state of the internal counters via the attestation token; and
one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions operable when executed by the one or more processors to cause the one or more processors to perform operations comprising:
accessing the attestation token for the apparatus, wherein: the attestation token is generated by the crypto-processor of the apparatus; and the attestation token enables the peer devices in the BGP network to validate that the apparatus is in the known safe state at the current time, wherein the known safe state is based on the identity of the apparatus and the one or more running binaries corresponding to the valid chain of binary signatures on the apparatus;
encoding the attestation token as a canary stamp in a BGP signaling message, wherein the encoding comprises: appending the canary stamp to the BGP signaling message; and sending the BGP signaling message with the encoded attestation token to a second apparatus of the BGP network for computing a trust level of the apparatus; and
computing a routing table of the BGP network using the trust level, wherein the routing table is updated based on the attestation token.