ITR: Automated Trust Negotiation in Open Systems

标题ITR：开放系统中的自动信任协商PI Kent Seamons联席PI宁辉Li John Mitchell Brian East William Winsborough Marianne Winslett自动信任协商(ATN)是一种用于开放、灵活系统的访问控制和身份验证的新方法，该系统由一组组织组成，这些组织必须动态地组成联盟并共同工作，以响应不可预见的需求和机会。ATN通过为每个资源分配一个访问控制策略来实现开放计算，该访问控制策略将使“局外人”能够访问该资源；尝试访问该资源会触发信任协商，包括反复、双边地披露数字证书和相关信息。这个项目将表明，ATN是开放计算系统访问控制和认证问题的实际解决方案，它解决了部署信任协商设施的最关键的理论和系统问题。该项目将解决的具体领域包括ATN的访问控制策略语言、轻量级策略评估引擎、与新语言兼容的改进的ATN协议和策略、为谈判方提供的可证明的隐私和自主权保证，以及下一代版本的TrustBuilder ATN原型，展示了ATN在模块化、可重复使用和高度可扩展的实施中的部署。这些改进将在保健应用程序和项目合作伙伴提供的其他方案的背景下进行探索。

TITLE ITR: Automated Trust Negotiation in Open SystemsPI Kent Seamons co-PIs Ninghui Li John Mitchell Brian Tung William Winsborough Marianne WinslettAutomated trust negotiation (ATN) is a new approach to access control and authentication for the open, flexible systems formed by sets of organizations that must dynamically form coalitions and work together to respond to unforeseen needs and opportunities. ATN enables open computing by assigning an access control policy to each resource that is to be made accessible to "outsiders"; an attempt to access the resource triggers a trust negotiation, consisting of the iterative, bilateral disclosure of digital credentials and related information. This project will show that ATN is a practical solution to the access control and authentication problems of open computing systems, by resolving the most critical remaining theoretical and systems issues for the deployment of trust negotiation facilities. Specific areas that the project will address include access control policy languages for ATN, light-weight policy evaluation engines, improved ATN protocols and strategies compatible with the new languages, provable privacy and autonomy guarantees for negotiating parties, and a next-generation version of the TrustBuilder ATN prototype, demonstrating the deployment of ATN in a modular, reusable, and highly scalable implementation. These enhancements will be explored in the context of health care applications and additional scenarios supplied by the project partners.