An Attribute-Constraints-Oriented Automated Trust Negotiation Model

您当前的位置：

首页 >

文章列表页 >

An Attribute-Constraints-Oriented Automated Trust Negotiation Model

更新时间：2025-07-09

- An Attribute-Constraints-Oriented Automated Trust Negotiation Model
- Vol. 43, Issue 8, Pages: 1-5(2009)
- 作者机构：
  
  西安交通大学电子与信息工程学院,西安,710049
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP309
- Online First：10 August 2009，
  
  Published：2009
- 稿件说明：
移动端阅览
An Attribute-Constraints-Oriented Automated Trust Negotiation Model[J]. 2009, 43(8): 1-5.
DOI：

An Attribute-Constraints-Oriented Automated Trust Negotiation Model[J]. 2009, 43(8): 1-5. DOI：

摘要

针对已有自动信任协商系统策略语言粒度粗糙、不能生成所有信任序列且缺乏评估与择优机制等问题

提出一种面向属性约束的自动信任协商模型——ACATN.其具有如下特点:利用属性约束细化策略语言粒度

不仅有效地保护了敏感服务和证书

而且提高了系统的灵活性; 使用全局访问控制策略终止不会成功的协商请求

从而提高协商效率; 采用信任序列搜索树描述信任序列的生成过程

基于此树的宽度、深度优先搜索算法在快速生成一个信任序列的同时

能够生成所有的信任序列; 通过属性证书披露代价和通信开销评估信任序列

以便于系统选择最优信任序列.结合具体实例对ACATN模型的使用进行了说明.

Abstract

The existing automated trust negotiation systems suffer from the following drawbacks: the policy languages are coarse-grained

the negotiation strategy cannot generate all trust sequences

and the mechanism to evaluate and select trust sequences is absent. To address the above problems

an attribute-constraint-oriented automated trust negotiation(ACATN)model is proposed. The policy language is refined by using attribute constraint

which can not only effectively protect sensitive services and certificates

but also enhance its flexibility. The global access control policy is used to terminate impossible negotiation in advance so that the negotiation efficiency can be improved. The process of generating trust sequence is described by trust sequence searches tree. Based on the tree

the breadth-first and depth-first searches generate not only a trust sequence quickly

but also all trust sequences. Trust sequences are evaluated via disclosure cost and communication overhead so that the optimal one can be selected. ACATN is illustrated using a typical example.

关键词

Keywords

references

SKOGSRUD H, MOTAHARI-NEZHAD H R, BE-NATALLAH B, et al. Modeling trust negotiation for web services [J]. Computer, 2009, 42(2): 54-61.

陈书义,孙锦山,赵宏,等.NSIS下通用访问控制信令协议的设计与验证 [J].西安交通大学学报,2009,43(4):34-38.

CHEN Shuyi, SUN Jinshan, ZHAO Hong, et al. Design and validation of universal access control signaling protocol based on next steps in signaling [J]. Journal of Xi'an Jiaotong University, 2009, 43(4):34-38.

WINSBOROUGH W H, SEAMONS K E, JONES V E. Automated trust negotiation [C]∥DARPA Information Survivability Conference and Exposition. Los Alamitos, CA, USA: IEEE Computer Society, 2000: 88-10.

YU Ting, WINSLETT M, SEAMONS K E. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation [J]. ACM Trans on Information and System Security, 2003, 6(1):1-42.

YU Ting, MA Xiaosong, WINSLETT M. PRUNES: an efficient and complete strategy for automated trust negotiation over the internet [C]∥ACM Conference on Computer and Communications Security. New York,USA: ACM, 2000: 210-219.

BERTINO E, FERRARI E, SQUICCIARINI A C. Trust-χ: a peer-to-peer framework for trust establishment [J]. IEEE Trans on Knowledge and Data Engineering, 2004, 16(7): 827-841.

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Design and Validation of Universal Access Control Signaling Protocol Based on Next Steps in Signaling

Association Inheritance Mechanism in Active Authorization Management

An Access Control Model with Task-State Sensitivity and Its CPN Simulation

Research on Efficient Trust Management in Distributed Environments

Ciphertext-Policy Weighted Attribute Based Encryption Scheme

Related Author

赵宏 1

闻英友 1

孙锦山 1

陈书义 1

韦凯 1

郭玉彬 3

Related Institution

State Engineering Research Center of Software, Northeastern University

School of Computer Science and Engineering, South China University of Technology

浙江科技学院信息学院

华南理工大学计算机科学与工程学院

School of Electronics and Information Engineering, Xi'an Jiaotong University

⁰