信任协商中信任证敏感属性的保护研究  

Credentials Sensitive Attribute Protection in Trust Negotiation

作　　者：余涵[1] 

机构地区：[1]中南民族大学计算机科学学院,湖北武汉430074

出　　处：《软件导刊》2009年第11期183-185,共3页Software Guide

摘　　要：多安全域环境下的访问控制是域间进行协作必须要解决的问题之一。交互主体间的陌生性以及共享资源的敏感性成为跨域建立信任关系的主要障碍。自动信任协商的提出提供了解决这一问题的新途径,它通过协作主体间信任证和访问控制策略的反复交互披露,在资源的请求者和提供者之间自动地建立起信任关系。在分析现有自动信任协商技术的基础上,针对信任协商中存在的证书敏感属性信息泄露的问题提出了改进的方案。该方案可有选择性地披露信任证的敏感属性,从而达到协商过程中减少敏感信息泄露和提高协商系统抗攻击能力的目的。Access control in muhi-domain environments is one of the important issues of building coalition between domains.However, how to establish trust among strangers without prior relationship and common security domain poses much difficulty for these activities. Auto- mated Trust Negotiation （ATN） is a new approach which establishes the trust relationship between strangers through iterative disclosure of credentials and access control policies. Based on the analysis of the current technology of automated trust negotiation,we proposed a scheme to improve the problem of the leakage of sensitive attribute information and personal privacy in trust negotiation. This scheme can disclose sensitive attributes in credential selectively ,and achieve the propose of reduce the sensitive information disclose and enhance the anti-attack capability of the trust negotiation system.

关 键 词：信任协商 信任证 敏感属性 协商策略 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]