Parsimonious Semantic Trust Negotiation
Parsimonious Semantic Trust Negotiation
复制标题
DOI：
--
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
Zhang Yan
中科院分区：
文献类型：
--
作者：
Zhang Yan
自动信任协商(ATN)是两个不熟悉的实体轮流交换其数字属性证书以建立相互信任关系的过程。由于现有的ATN框架需要实体发布完整的属性证书来证明它们满足其他实体的访问控制策略所规定的身份约束条件，因此在许多情况下实体的私有身份信息经常被过度泄露。提出了一种新的简约语义信任协商框架，在该框架中，实体可以通过交换DL-TNL语义身份断言来建立信任关系，而不是交换整个属性证书。该框架可以大大降低隐私身份信息的泄露程度。在该框架下，作者提出了一种正确、完整、高效的简约型语义信任协商策略，允许参与者的协商机构在每个交换步骤计算并公开一组令人满意的包含最少私有身份信息的DL-TNL断言。总之，简约式语义信任协商策略可以最大限度地减少信任协商过程中泄露的私有身份信息，并在存在理论上成功的信任协商序列的情况下，保证参与协商的资源请求者最终获得访问权限。文中给出了该策略性质的所有证明，并给出了相关的符合性检测算法及其分析。
Automated Trust Negotiation (ATN) is a process in which two unfamiliar entities exchange their digital attribute certificates in turn to set up mutual trust relationship with each other. Since existing ATN frameworks require entities to release entire attribute certificates to prove that they satisfy the identity constraint condition stated by the other entities’ access control policies,private identity information of entities is often over-revealed in many circumstances. In this paper,the authors propose a novel parsimonious semantic trust negotiation framework in which entities can build trust relationship by exchanging DL-TNL semantic identity assertions instead of entire attribute certificates. This framework can greatly reduce the degree of disclosed private identity information. Under the framework,the authors propose a correct,complete and efficient parsimonious semantic trust negotiation strategy to allow the negotiation agencies of participants to compute and disclose a satisfying set of DL-TNL assertions which contains least private identity information at every exchange step. In a word,the parsimonious semantic trust negotiation strategy can minimize the disclosed private identity information in the trust negotiation processes and guarantees the resource requesters participating in the processes to get the access rights finally if there does exist a theoretical successful trust negotiation sequence. All of the proofs about the properties of the strategy are given in this paper,so are the relevant compliance checking algorithms and their analyses.