Abstract: A computer-implemented method may be used to establish trustworthiness of an Edge Computing Device. The method may include, at one or more storage devices, storing expected values pertaining to aspects of the Edge Computing Device. The method may further include, at one or more hardware processing devices, receiving the expected values, receiving an Event Log from the Edge Computing Device, extracting actual values from the Event Log, and comparing the actual values with the expected values to determine whether the actual values match the expected values. The method may further include, at one or more communication devices, responsive to determining whether the actual values match the expected values, transmitting an indication of whether the Edge Computing Device is trustworthy.

Abstract: A computer-implemented method for establishing trustworthiness of an Edge Computing Device may include predicting a platform configurable register (PCR) value for a system update to generate a predicted PCR value, and then storing the predicted PCR value. The method may further include running the system update by storing updated software on the Edge Computing Device, measuring one or more aspects of the updated software to generate a measured PCR value, comparing the measured PCR value with the predicted PCR value to determine that the measured PCR value matches the predicted PCR value. Responsive to determining that the measured PCR value matches the predicted PCR value, secret information may be transmitted. Predicting the PCR value may include using a TPM log to generate a pre-calculated hash of one or more changed parts of the updated software. Enhanced Authorization may be used to generate an authorization policy including the predicted PCR value.