Trust Domains - A framework for modelling and designing e-service infrastructures for controlled sharing of information

对于企业和政府来说，确保信息通过多个协作组织流向正确的人变得越来越重要。然而，在分享信息的生产力和功能收益与信息技术系统泄漏和开放的风险之间存在着权衡。可信计算和虚拟化的最新发展可以以灵活的方式解决这些权衡，因为它们允许创建具有可配置安全属性的策略控制的IT系统。协作，安全的共享解决方案可以通过创建动态的“信任域”来实现--我们建议在策略服务基础架构堆栈的所有级别上和之间探索的概念--强制执行信息流和配置策略。我们提出了一个客户驱动的项目，从警察部队和他们的工作机构内的信息共享的例子开始。基于对所需流程和政策的实际理解，我们将开发一个抽象框架，用于限定信息的类型和流程以及相关风险的相应模型。这允许流程所有者描述他们的需求和关注点。我们将研究如何限定信息流并将其映射到信任域配置，为支持解决方案架构师构建IT服务导出指导方针和模板，并扩展我们的分析和建模工具，以帮助利益相关者了解与信息流和执行机制相关的风险。创建和运营新的电子商务系统基于新方法和工具集的增强信任和安全属性的服务。我们建议的框架采用业务驱动的方法来处理风险、信任和安全，并涵盖流程和系统分析、设计、配置、安全策略、人员角色和运营管理等方面。我们通过拥有模型、工具和方法来创造价值主张，使我们能够弥合业务层面风险与系统配置和政策设计之间的现有差距。因此，将服务需求映射到受信任的平台、域和基础设施上该项目补充并扩展了TSB资助的正在进行的关于信任经济学以及惠普英国企业服务开创和利用的复杂性、风险和弹性管理的工作。布里斯托的惠普企业服务和惠普实验室都认为，将高级别激励模型和信任域的系统设计联系起来将是一个独特的全球差异化因素，不仅符合US-NITRD“改变游戏规则”的主题，而且在提出综合方法方面领先于他们。该项目的学术组成部分将有助于支持该计划的以下发展：-信任域的概念，在社会技术系统堆栈的各个层次和之间- 数学系统建模技术，以支持用于推理信任域概念的属性、动态和应用的工具和方法;- 对技术、设计和架构属性进行全面的分类，这些属性会在部署的服务中产生不同的信任特征; -对组件之间的信任质量和期望进行建模，以便能够在给定的上下文中对基于不同架构范例的解决方案进行有意义的比较。目标市场：企业内部和政府内部的数据中心和“云”，其严格的信息流控制要求无法满足今天的供应商。

Ensuring flows of information to the right people over multiple collaborating organisations is becoming increasingly important for both business and government. There are, however, trade-offs between the productivity and functional gains from sharing information, on the one hand, and the risks of leakage and opening up IT systems, on the other. Recent developments in trusted computing and virtualization can address these trade offs in a flexible manner, as they allow for the creation of policy controlled IT systems with configurable security properties. Collaborative, secure sharing solutions can be realized through the creation of dynamic 'Trust Domains' --- a notion that we propose to explore at and between all levels of the policy-service-infrastructure stack --- that enforce information flow and configuration policies. We propose a customer-driven project that starts out from examples of information sharing within police forces and agencies they work with. Based on a practical understanding of the required flows and policies, we will develop an abstract framework for qualifying types of and flows of information and a corresponding model of the associated risks. This allows process owners to describe their requirements and concerns. We will research how to qualify and map information flows to Trust Domain configurations, derive guidelines and templates for supporting solution architects in building IT services, and extend our set of analytics and modelling tools to help stakeholders gain an understanding of the risks associated with information flows and enforcement mechanisms.There are business opportunities for creating and operating new e-services with enhanced trust and security properties based on new methodologies and toolsets. The framework we suggest takes a business driven approach to risk, trust and security and covers aspects of process and system analysis, design, configuration, security policy, human roles, and operational management. We create a value proposition by having the models, tools and methodologies that allows us to bridge the current gap between business level risk and system configuration and policy design. Hence mapping service needs onto trusted platforms, domains, and infrastructureThe project complements and expands ongoing, TSB-funded work on trust economics as well as on complexity, risk, and resilience management pioneered and exploited by HP's UK Enterprise Services. Both HP Enterprise Services and HP Labs, Bristol believe that bridging high-level incentive models and systems design for trust domains would be a unique global differentiator, not only aligned with US-NITRD 'game-changing' themes, but ahead of them in suggesting an integrated approach. The academic components of this project will contribute the following developments in support of this programme: - The concept of Trust Domain, at and between the various levels of the socio-technical system stack (policy-service-infrastructure); - Mathematical systems modelling technologies to support tools and methodologies for reasoning about the properties, dynamics, and applications of the Trust Domain concept; - A thorough taxonomy of technical, design, and architectural properties which give rise to different trust characteristics in deployed services; - Modelling the quality of trust and expectations among components, to the extent of being able to make a meaningful comparison of solutions based on different architectural paradigms, within a given context.Targeted market: intra-corporate and intra-governmental data centres and 'clouds' whose stringent information flow control requirements cannot be met by today's providers.