面向分布式证明的信任协商策略语言和方法  

Distributed Proving Oriented Language and Method for Trust Negotiation

作　　者：王小峰[1] 苏金树[1] 张强[1] 张一鸣[1] 

机构地区：[1]国防科学技术大学计算机学院,湖南长沙410073

出　　处：《软件学报》2009年第10期2776-2786,共11页Journal of Software

基　　金：国家自然科学基金Nos.90604006;60303012;国家重点基础研究发展计划(973)No.2005CB321801~~

摘　　要：现有信任协商语言对复杂的访问控制策略和协商策略以及信任分布式证明方法的支持都不够全面.在RT(role-based trust-management)语言基础上提出一种面向信任分布式证明和协商的策略语言RTP(role-based trust proving),其特点是能够支持信任分布式证明方法,可以定义复杂角色,保护信任证敏感信息并能避免信任证盲目搜索.给出了RTP语言及其推理规则的语法语义描述,介绍了一种基于RTP语言的信任分布式证明协商示例算法.实验结果表明,该算法支持RTP语言的功能,且比传统信任协商方法有很大的性能提升.Most existing trust negotiation languages can not simultaneously have the following important functions： Distributed trust proving, complicated access control definition and negotiation-related constraints. Based on RT （role-based trust-management） language, this paper proposes a distributed trust proving and negotiation orientated language RTP （role-based trust proving）. It can support distributed trust proving, define complicated roles, protect the policy＇s sensitive information and avoid unrelated credential fetching. Both the syntax and semantics of RTP are introduced. The paper also designs a distributed trust proving and negotiation algorithm based on RTP to demonstrate the efficiency of RTP. Experimental results show that the algorithm supports the functions aimed by RTP, and outperforms the traditional trust negotiation in terms of both time and number of credential transfers.

关 键 词：信任协商 分布式证明 逻辑签名 信任证释放 启发规则 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]