面向属性约束的自动信任协商模型

官尚元; 伍卫国; 董小社; 梅一多

您当前的位置：

首页 >

文章列表页 >

面向属性约束的自动信任协商模型

更新时间：2025-07-09

- 面向属性约束的自动信任协商模型
- An Attribute-Constraints-Oriented Automated Trust Negotiation Model
- 西安交通大学学报 2009年43卷第8期页码：1-5
- 作者机构：
  
  西安交通大学电子与信息工程学院,西安,710049
- 作者简介：
- 基金信息：
  
  : 2009-03-10. 作者简介: 官尚元(1979-),男,博士生;伍卫国(联系人),教授,博士生导师. 基金项目: 国家自然科学基金资助项目(60773118);国家高技术研究发展计划资助项目(2006AA01109)
- DOI：
  中图分类号： TP309
- 网络首发：2009-08-10，
  
  纸质出版：2009
- 稿件说明：
移动端阅览
官尚元, 伍卫国, 董小社, 等. 面向属性约束的自动信任协商模型[J]. 西安交通大学学报, 2009,43(8):1-5.

An Attribute-Constraints-Oriented Automated Trust Negotiation Model[J]. 2009, 43(8): 1-5.
官尚元, 伍卫国, 董小社, 等. 面向属性约束的自动信任协商模型[J]. 西安交通大学学报, 2009,43(8):1-5. DOI：

An Attribute-Constraints-Oriented Automated Trust Negotiation Model[J]. 2009, 43(8): 1-5. DOI：

摘要

针对已有自动信任协商系统策略语言粒度粗糙、不能生成所有信任序列且缺乏评估与择优机制等问题

提出一种面向属性约束的自动信任协商模型——ACATN.其具有如下特点:利用属性约束细化策略语言粒度

不仅有效地保护了敏感服务和证书

而且提高了系统的灵活性; 使用全局访问控制策略终止不会成功的协商请求

从而提高协商效率; 采用信任序列搜索树描述信任序列的生成过程

基于此树的宽度、深度优先搜索算法在快速生成一个信任序列的同时

能够生成所有的信任序列; 通过属性证书披露代价和通信开销评估信任序列

以便于系统选择最优信任序列.结合具体实例对ACATN模型的使用进行了说明.

Abstract

The existing automated trust negotiation systems suffer from the following drawbacks: the policy languages are coarse-grained

the negotiation strategy cannot generate all trust sequences

and the mechanism to evaluate and select trust sequences is absent. To address the above problems

an attribute-constraint-oriented automated trust negotiation(ACATN)model is proposed. The policy language is refined by using attribute constraint

which can not only effectively protect sensitive services and certificates

but also enhance its flexibility. The global access control policy is used to terminate impossible negotiation in advance so that the negotiation efficiency can be improved. The process of generating trust sequence is described by trust sequence searches tree. Based on the tree

the breadth-first and depth-first searches generate not only a trust sequence quickly

but also all trust sequences. Trust sequences are evaluated via disclosure cost and communication overhead so that the optimal one can be selected. ACATN is illustrated using a typical example.

关键词

Keywords

references

SKOGSRUD H, MOTAHARI-NEZHAD H R, BE-NATALLAH B, et al. Modeling trust negotiation for web services [J]. Computer, 2009, 42(2): 54-61.

陈书义,孙锦山,赵宏,等.NSIS下通用访问控制信令协议的设计与验证 [J].西安交通大学学报,2009,43(4):34-38.

CHEN Shuyi, SUN Jinshan, ZHAO Hong, et al. Design and validation of universal access control signaling protocol based on next steps in signaling [J]. Journal of Xi'an Jiaotong University, 2009, 43(4):34-38.

WINSBOROUGH W H, SEAMONS K E, JONES V E. Automated trust negotiation [C]∥DARPA Information Survivability Conference and Exposition. Los Alamitos, CA, USA: IEEE Computer Society, 2000: 88-10.

YU Ting, WINSLETT M, SEAMONS K E. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation [J]. ACM Trans on Information and System Security, 2003, 6(1):1-42.

YU Ting, MA Xiaosong, WINSLETT M. PRUNES: an efficient and complete strategy for automated trust negotiation over the internet [C]∥ACM Conference on Computer and Communications Security. New York,USA: ACM, 2000: 210-219.

BERTINO E, FERRARI E, SQUICCIARINI A C. Trust-χ: a peer-to-peer framework for trust establishment [J]. IEEE Trans on Knowledge and Data Engineering, 2004, 16(7): 827-841.

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

NSIS下通用访问控制信令协议的设计与验证

主动授权管理中的关联继承机制

任务状态敏感的访问控制模型及其有色网仿真

分布式环境中高效信任管理的研究

密文策略的权重属性基加密方案