Requirements for policy languages for trust negotiation

K. E. Seamons, M. Winslett, Ting Yu, B. Smith, E. Child, J. Jacobson, H. Mills, Lina Yu

Research output: Chapter in Book/Report/Conference proceedingConference contribution

103 Citations (Scopus)

Abstract

In open systems like the Internet, traditional approaches to security based on identity do not provide a solution to the problem of establishing trust between strangers, because strangers do not share the same security domain. A new approach to establishing trust between strangers is trust negotiation, the bilateral exchange of digital credentials describing attributes of the negotiation participants. This approach relies on access control policies that govern access to protected resources by specifying credential combinations that must be submitted to obtain authorization. We describe a model for trust negotiation, focusing on the central role of policies. We delineate requirements for policy languages and runtime systems for trust negotiation, and evaluate four existing policy languages for trust management with respect to those requirements. We conclude with recommendations for extending existing policy languages or developing new policy languages to make them suitable for use in future trust negotiation systems.

Original languageEnglish
Title of host publicationProceedings - 3rd International Workshop on Policies for Distributed Systems and Networks, POLICY 2002
Pages68-79
Number of pages12
DOIs
Publication statusPublished - 1 Dec 2002
Event3rd International Workshop on Policies for Distributed Systems and Networks, POLICY 2002 - Monterey, CA, United States
Duration: 5 Jun 20027 Jun 2002

Publication series

NameProceedings - 3rd International Workshop on Policies for Distributed Systems and Networks, POLICY 2002

Other

Other3rd International Workshop on Policies for Distributed Systems and Networks, POLICY 2002
CountryUnited States
CityMonterey, CA
Period5/6/027/6/02

    Fingerprint

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Control and Systems Engineering

Cite this

Seamons, K. E., Winslett, M., Yu, T., Smith, B., Child, E., Jacobson, J., Mills, H., & Yu, L. (2002). Requirements for policy languages for trust negotiation. In Proceedings - 3rd International Workshop on Policies for Distributed Systems and Networks, POLICY 2002 (pp. 68-79). [1011295] (Proceedings - 3rd International Workshop on Policies for Distributed Systems and Networks, POLICY 2002). https://doi.org/10.1109/POLICY.2002.1011295