Traust: a trust negotiation-based authorization service for open systems

In recent years, trust negotiation (TN) has been proposed as a novel access control solution for use in open system environments in which resources are shared across organizational boundaries. Researchers have shown that TN is indeed a viable solution for these environments by developing a number of policy languages and strategies for TN which have desirable theoretical properties. Further, existing protocols, such as TLS, have been altered to interact with prototype TN systems, thereby illustrating the utility of TN. Unfortunately, modifying existing protocols is often a time-consuming and bureaucratic process which can hinder the adoption of this promising technology. In this paper, we present Traust, a third-party authorization service that leverages the strengths of existing prototype TN systems. Traust acts as an authorization broker that issues access tokens for resources in an open system after entities use TN to satisfy the appropriate resource access policies. The Traust arch...

• Type: Conference
• Year: 2006
• Where: SACMAT
• Authors: Adam J. Lee, Marianne Winslett, Jim Basney, Von Welch
• Keywords: Access Control Solution, Open System, Prototype Tn Systems, SACMAT 2006