US Patent 10447682 Trust management in an electronic environment

A new machine being initiated for a deployment can attempt to authenticate itself using a signed certificate, and a decision is made whether to trust the machine and issue the signed certificate. Since not all information may be readily available, a rationalization procedure can utilize the available information, as may be associated with a certificate signing request, determine to whether to trust the machine and issue the signed certificate. When the source of truth data subsequently becomes available, a justification process can use that data to determine whether the machine should be trusted and the decision to sign the certificate was proper. If the machine should not be trusted, the certificate can be revoked and the machine terminated.