Patent ID: 11863561
Assignee: ORACLE INTERNATIONAL CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method, comprising:
receiving, at an edge node of a cloud infrastructure environment, a first request from a console associated with the cloud infrastructure environment,
wherein the first request comprises a first instruction to create a host instance for a host node,
wherein the first request comprises a set of authentication data for an edge attestation process,
wherein the set of authentication data comprises a first endorsement key and a first set of state data,
wherein the first set of state data is indicative of a reference state of the host node;

receiving, at the edge node, a second request from the host node,
wherein the second request comprises a second instruction to connect the host node to the cloud infrastructure environment;

performing the edge attestation process at least in part via the edge node, wherein the edge attestation process comprises:
receiving, at the edge node, a second endorsement key from the host node;
validating the second endorsement key at least by comparing the second endorsement key with the first endorsement key;
receiving, at the edge node, a second set of state data,
wherein the second set of state data is indicative of a state of the host node;

validating the second set of state data at least by comparing the second set of state data with the first set of state data; and

responsive to validating the second endorsement key and the second set of state data,
transmitting, from the edge node to the host node, a network address corresponding to a resource of the cloud infrastructure environment,

wherein the host node accesses the resource using the network address.