Cryptographic enforcement based on mutual attestation for cloud services

Abstract

In accordance with embodiments disclosed herein, there are provided systems, apparatuses, and methods for implementing cryptographic enforcement based on mutual attestation for cloud services. For example, in one embodiment, such means may include receiving, at the service provider, a request from a client, the request being for services from the service provider to the client; sending to a trust broker, from the service provider, a trust policy of the service provider against which trustworthiness attributes and capabilities of both the service provider and the client are to be evaluated by the trust broker; receiving, at the service provider, a certificate from the trust broker attesting to compliance of the service provider with the trust policy; sending the certificate from the service provider to the client for affirming mutual attestation of both the service provider and the client in compliance with the trust policy according to evaluation by the trust broker; establishing a connection between the service provider and the client for the service provider to render the requested services to the client; and encrypting information exchanged between the service provider and the client in fulfillment of the request for services from the client. Other related embodiments are further described.