Automated Trust Negotiation:

Sep 24, 2003

Abstract

As we are moving towards a globally internetworked infrastructure, an
increasing amount of information and resources are available through the
Internet in a variety of forms. In this context, how to provide flexible,
scalable and efficient protection for sensitive information becomes a
challenging research problem.

In open systems like the Internet, many interactions happen between
strangers, i.e., entities that have no pre-existing relationship and may
not share a common security domain. In order for strangers to conduct
sensitive interactions, a sufficient level of mutual trust must be
established. Traditional identity-based approaches are usually not
adequate. In this talk, I will present Trust Negotiation, which is a new
approach to establishing trust between strangers through the disclosure of
digital credentials and the use of access control policies. My talk will
focus on how to guarantee the establishment of trust whenever possible
when negotiation participants use different algorithms to determine what
credentials and resources to disclose.