Patent ID: 8661521

Claim:
An apparatus comprising: a host execution environment; and a tunnel proxy coupled with the host execution environment, the tunnel proxy to provide a proxy of a remote policy decision point to the host execution environment, wherein the tunnel proxy includes logic to provide a security protocol client to the remote policy decision point and logic to provide a security protocol server to the host execution environment, the tunnel proxy to implement a local switch to control access to a network channel that also has a remote switch to control access to the same channel, the tunnel proxy to be authenticated by the remote policy decision point before providing the proxy of the remote policy decision point, the local switch controlled by a first enforcement policy maintained by the proxy of the remote policy decision point, the remote switch controlled by a second enforcement policy maintained by the remote policy decision point, the first enforcement policy being the same as the second enforcement policy such that the tunnel proxy and the remote policy decision point together determine whether the host execution environment is able to use the channel, wherein the tunnel proxy further comprises at least one of: collection logic, the collection logic to collect integrity measurement data associated with the host; and reporting logic, the reporting logic to enable the tunnel proxy to report the integrity measurement data to a remote policy decision point.