Distributed Proving Oriented Language and Method for Trust Negotiation

Abstract

现有信任协商语言对复杂的访问控制策略和协商策略以及信任分布式证明方法的支持都不够全面.在RT(role-based trust-management)语言基础上提出一种面向信任分布式证明和协商的策略语言RTP(role-based trust proving),其特点是能够支持信任分布式证明方法,可以定义复杂角色,保护信任证敏感信息并能避免信任证盲目搜索.给出了RTP语言及其推理规则的语法语义描述,介绍了一种基于RTP语言的信任分布式证明协商示例算法.实验结果表明,该算法支持RTP语言的功能,且比传统信任协商方法有很大的性能提升.;Most existing trust negotiation languages can not simultaneously have the following important functions: Distributed trust proving, complicated access control definition and negotiation-related constraints. Based on RT (role-based trust-management) language, this paper proposes a distributed trust proving and negotiation orientated language RTP (role-based trust proving). It can support distributed trust proving, define complicated roles, protect the policy’s sensitive information and avoid unrelated credential fetching. Both the syntax and semantics of RTP are introduced. The paper also designs a distributed trust proving and negotiation algorithm based on RTP to demonstrate the efficiency of RTP. Experimental results show that the algorithm supports the functions aimed by RTP, and outperforms the traditional trust negotiation in terms of both time and number of credential transfers.