一种基于树建模的自动信任协商策略  

Tree-based strategy for automated trust negotiation

作　　者：姚慧[1] 高承实[1] 戴青[1] 张徐[1] 

机构地区：[1]解放军信息工程大学电子技术学院,郑州450004

出　　处：《计算机工程与应用》2008年第15期127-130,共4页Computer Engineering and Applications

基　　金：国家自然科学基金项目(the National Natural Science Foundation of China under Grant No.6053012)

摘　　要：自动信任协商是跨多安全域的实体间建立信任关系的一种新方法,协商策略规定了协商过程中信任凭证和访问控制策略的披露方式。针对目前的研究中没有区分凭证的敏感度的问题,引入凭证权重的概念,设计了一种基于带权重的树的协商策略,采取局部取优的思想,每次在访问控制策略可选的情况下选取最小权重的凭证进行披露,直至协商成功或失败。经证明,该策略安全、完备且高效。Automated Trust Negotiation is a new approach to establish trust relationship between strangers of different security domains on the network.The negotiation strategy specifies how the negotiation process executes and determines the exchanges of credentials and access control policies.Most research on negotiation strategy treat all credentials with the same sensitivity.The credential weight is introduced to solve the problem.A strategy based on the tree with weight is designed under the idea of local optimization.The entity will always choose the credential with the lowest weight to request for disclose until the negotiation ends with success or failure.The strategy is proved to be safe,complete and efficient.

关 键 词：自动信任协商 协商策略 信任凭证 访问控制策略 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]