New Secure Trust Negotiation Strategy Algorithm

JIN Lun,PENG Zhao-yang,XIE Jun-yuan

DOI: https://doi.org/10.3969/j.issn.1001-3695.2007.06.044

2007-01-01

Abstract:The general flow of trust negotiation was introduced,the concept of gradual trust negotiation and policy graph was given,a new secure trust negotiation strategy algorithm was put and the security of it was analyzed.

What problem does this paper attempt to address?

A Complete and Efficient Strategy Based on Petri Net in Automated Trust Negotiation

Yan He,Miaoliang Zhu

DOI: https://doi.org/10.4108/infoscale.2007.888

2007-01-01

Abstract:Traditional security model, where the identity of all possible requesting subjects must be pre-registered in advance, is not suitable for the distributed applications with strong real-time requirements, especially recently popular P2P networks and Grid computing. A promising approach is represented by automated trust negotiation, which establishes trust between strangers through the exchange of digital credentials and the use of access control policies. An automated trust negotiation strategy needs to be adopted to establish trust between two parties based on their disclosure policies. Previously proposed negotiation strategies may fail when in fact success is possible, disclose irrelevant credentials, or have high communication or computational complexity. In this paper, we model the policies participating trust negotiation as Negotiation Petri Net and propose a trust negotiation Strategy based on Negotiation Petri Net (SNPN) by combining the characteristics of Negotiation Petri Net architecture with the behaviors of auto trust negotiation. We prove that SNPN is efficient with O(n) communication complexity and O(nm) computational complexity including Negotiation Petri Net building process and the negotiation process in the worst case, where n is the number of credentials and m is the size of the credential disclosure policies. Meanwhile SNPN is complete and makes sure that no irrelevant credentials will be disclosed during negotiations.
An Efficient and Minimum Sensitivity Cost Negotiation Strategy in Automated Trust Negotiation

Yan He,Miaoliang Zhu,Chunying Zheng

DOI: https://doi.org/10.1109/CSSE.2008.867

2008-01-01

Abstract:Traditional security model, where the identity of all possible requesting subjects must be pre-registered in advance, is not suitable for the distributed applications with strong real-time requirements. A promising approach is represented by automated trust negotiation, which establishes trust between strangers through the exchange of digital credentials and the use of access control policies. As the credentials contain sensitive information, entities disclose credentials circumspectly. Given multiple credential exchange sequences achieving the same result, it is desirable to pick the sequence that discloses a set of minimum sensitive credentials. In this paper, we model the policies participating trust negotiation as a Negotiation Petri Net and propose a trust negotiation MSC strategy, which works by the characteristics of Negotiation Petri Net architecture, the behaviors of auto trust negotiation and the greedy algorithm. We prove that the MSC strategy is complete, efficient and mini-sensitivity cost. It also makes sure that no irrelevant credentials will be disclosed during negotiations.
Automated trust negotiation based on security level

Wei-jun SHAO,Jun-yuan XIE,Lun JIN

DOI: https://doi.org/10.3969/j.issn.1001-3695.2007.12.063

2007-01-01

Abstract:This paper introduced the notion of automated trust negotiation based on security level and how to use it to protect the system from the attacks leading to denial of service or leakage of sensitive information.
Formal security analysis of automated trust negotiation

Xinxin Liu,Shaohua Tang,Kai Wei

DOI: https://doi.org/10.1109/ICMLC.2010.5580592

2010-01-01

Abstract:Automated trust negotiation (ATN) is an approach to establishing mutual trust between strangers wishing to share resources or conduct business by gradually requesting and disclosing digitally signed credentials. We present the formalization of automated trust negotiation system in the applied pi calculus and analyze its security property automatically with the assistant of an automatic protocol analyzer, ProVerif.
Anonymous authorization in trust management

彭志宇,李善平,杨朝晖,林欣

DOI: https://doi.org/10.3785/j.issn.1008-973X.2010.05.011

2010-01-01

Abstract:An anonymous authorization mechanism was proposed to protect the user's privacy in the process of authorization in trust management. User requested for services using their real identification in most of the classic trust-management language system, which potentially leaded to the privacy leaking. Through dynamically searching for the delegation roles which take over the request, the anonymous authorization mechanism retained the right behavior of credential chain discovery and achieved a quantitative way of anonymity against the resource provider. Results showed that the anonymous mechanism shared the same worst-case time complexity with the traditional forward credential-chain-searching method. A method of caching all the members in the nodes was proposed to improve the performance in time spending. Simulation results showed that the performance in time spending greatly improved in the relative stable systems, in which the credentials change slowly.
Distributed Certification Application Via a Trusted Dealer

Liu Duan-yang,Pan Xue-zeng,Ping Ling-di

DOI: https://doi.org/10.1631/jzus.2003.0555

2003-01-01

Abstract:Distributed certification via threshold cryptography is much more secure than other ways to protect certification authority (CA)'s private key, and can tolerate some intrusions. As the original system such as ITTC, etc., is unsafe, inefficient and impracitcal in actual network environment, this paper brings up a new distributed certification scheme, which although it generates key shares concentratively, it updates key shares distributedly, and so, avoids single-point failure like ITTC. It not only enhances robustness with Feldman verification and SSL protocol, but can also change the threshold (t, k) flexibly and robustly, and so, is much more practical. In this work, the authors implement the prototype system of the new scheme and test and analyze its performance.
A Distributed Trust Management Based on Authorizing Negotiation in Open and Dynamic Environments

Shangyuan Guan,Xiaoshe Dong,Weiguo Wu,Yiduo Mei,Guofu Feng

DOI: https://doi.org/10.1109/aina.2008.25

2008-01-01

Abstract:Trust has been recognized as an important factor for information security in open and dynamic environments, such as Internet applications, p2p systems etc. On the basis of analyzing existing trust management systems, this paper proposes a Distributed Trust Management based on Authorizing Negotiation (DTMAN). DTMAN presents a number of innovative features. First, it can authorize strangers by using authorizing negotiation, so it is very suitable for open and dynamic environments. Second, a high efficient algorithm for compliance checking is developed to support DTMAN, whose time complexity and space complexity are both O(n) (where n is the cardinality of the set of authorization credentials). The experimental result shows that the algorithm of DTMAN is more efficient than others.
An Attribute-Constraints-Oriented Automated Trust Negotiation Model

GUAN Shangyuan,WU Weiguo,DONG Xiaoshe,MEI Yiduo

DOI: https://doi.org/10.3321/j.issn:0253-987X.2009.08.001

2009-01-01

Abstract:The existing automated trust negotiation systems suffer from the following drawbacks: the policy languages are coarse-grained,the negotiation strategy cannot generate all trust sequences,and the mechanism to evaluate and select trust sequences is absent.To address the above problems,an attribute-constraint-oriented automated trust negotiation(ACATN) model is proposed.The policy language is refined by using attribute constraint,which can not only effectively protect sensitive services and certificates,but also enhance its flexibility.The global access control policy is used to terminate impossible negotiation in advance so that the negotiation efficiency can be improved.The process of generating trust sequence is described by trust sequence searches tree.Based on the tree,the breadth-first and depth-first searches generate not only a trust sequence quickly,but also all trust sequences.Trust sequences are evaluated via disclosure cost and communication overhead so that the optimal one can be selected.ACATN is illustrated using a typical example.
Automated Trust Negotiation Based on Concurrent Zero-Knowledge for e-Business Applications

Shangyuan Guan,Xiaoshe Dong,Yiduo Mei,Weiguo Wu,Zhengdong Zhu

DOI: https://doi.org/10.1109/ICEBE.2008.50

2008-01-01

Abstract:Exchange of attribute certificates is a means to establish mutual trust between strangers wishing to share resources or conduct business transactions. Automated trust negotiation (ATN) is a promising approach to regulating the exchange of sensitive information during this process. It has been a fundamental but challenging problem to preserve the privacy of the two negotiation parties during the period of ATN. We present the enhanced hidden credentials and improved concurrent zero-knowledge proof protocol. Based on the above technologies, we propose an ATN for e-business applications, named CASTLE. CASTLE can not only enable the oblivious and selective usage of an attribute or a certificate, but also be resistible for many attacks, especially conspiracy attack. We illustrate the usage of CASTLE through a typical example.
A description logic-based policy compliance checker for trust negotiation

Xinxin Liu,Shaohua Tang,Shiqian Chen

DOI: https://doi.org/10.1007/s12083-015-0343-1

IF: 3.488

2015-01-01

Peer-to-Peer Networking and Applications

Abstract:utomated trust negotiation (ATN) is an approach to regulating the gradual exchange of sensitive resources, which are protected by access control policies, between two strangers to establish mutual trust in open distributed systems. Policy compliance checkers of ATN determine which credentials satisfy an access control policy and whether a particular set of credentials satisfies the relevant policy. We propose a description logic-based approach to policy compliance checking, in which the description logic (DL) 𝒮ℋ𝒪ℐ𝒩(𝒟) is exploited to formalize credentials and policies of ATN, and the state-of-the-art DL reasoners are leveraged for policy compliance checking. By exploring the semantics of credentials and policies defined by DL, our approach can promote the success of a negotiation whenever it is semantically possible. As long as a policy can be satisfied, our approach can find the credentials satisfying the policy. These credentials can be either syntactically defined in the policy or semantically imply those defined. In addition, benefiting from DL reasoning, attribute delegations that are modeled as semantic relations among attributes can be retrieved by our approach as the evidence of a negotiator’s satisfaction of an access control policy. This evidence is quite necessary in the ATN environment where negotiators are usually strangers belonging to different domains without a common knowledge of delegations.
Formal Analysis and Verification of Security for Automated Trust Negotiation

Xin-xin Liu,Shao-hua Tang

DOI: https://doi.org/10.3969/j.issn.1000-565X.2013.01.012

2013-01-01

Abstract:In order to implement the formal analysis and verification of the security for automated trust negotiation (ATN), this paper takes the formal analysis methods of security protocols as references and proposes a novel approach to ATN modeling and security verification with the help of the process algebra applied π calculus. In this approach, ATN is formalized as the parallel composition of two processes corresponding to two negotiators, and the process of a negotiator is the static modeling of its certificates and authorization policies. The ATN security is defined as the observational equivalence of the applied π calculus so as to verify not only the security of the authorization policy enforcement but also the privacy of negotiators. With the help of the automatic protocol analyzer ProVerif, the security of ATN is automatically analyzed. Experimental results show that the proposed approach helps to implement automatic security verification with high feasibility and efficiency.
Secure Routing Strategy Based on Attribute-Based Trust Access Control in Social-Aware Networks

Xueming Zhang,Haitao Deng,Zenggang Xiong,Yanchao Liu,Ying Rao,Yuanlin Lyu,Yuan Li,Delin Hou,Youfeng Li

DOI: https://doi.org/10.1007/s11265-023-01908-1

2024-02-18

Journal of Signal Processing Systems

Abstract:In social aware networks, the routing protocol possesses a considerable amount of sensitive user information during node transmission. When selecting the next hop node for transmitting information in social sensing networks, there is an inherent risk of privacy breach due to malicious nodes attacking innocent nodes within the network. To address the issue of user privacy leakage, this study presents a novel privacy-preserving access control algorithm, termed Attribute Trust-based Security (ATST), which is designed to protect sensitive information. The algorithm, based on encrypting the plaintext message to ensure message security, employs the user's attributes to create an attribute trust measurement model and a network access control structure. This process identifies a trusted next hop node for information transmission. Subsequently, the access control tree model derived from the attribute is utilized during decryption. After the message reached its destination node, only the user who satisfied the access control criteria of the decryption module was authorized to decrypt the ciphertext. By verifying the trust measurement and access control of nodes through the dual trust mechanism, it prevented malicious nodes from entering the network, causing damage to the network and affecting the performance of the network. In addition, the clear text message was encrypted and transmitted, and the final receiving node was verified to ensure the secure transmission of the message to the destination node. The simulation outcomes demonstrate that the ATST algorithm effectively mitigates the effects of malevolent nodes on the network, ensuring message transfer efficiency and reducing the average delay.

computer science, information systems,engineering, electrical & electronic
A Novel Automated Trust Negotiation Framework for Securing Grids

Shangyuan Guan,Yiduo Mei,Xiaoshe Dong,Zhao Wang,Zhengdong Zhu

DOI: https://doi.org/10.1007/978-3-540-92719-8_42

2007-01-01

Abstract:Automated Trust Negotiation (ATN) is a promising approach to allowing strangers to access sensitive services in open environments. Although many ATN systems are proposed, some issues still remain to be addressed: 1) they are centralized and cannot scale well; and 2) their policy languages are coarse-grained. To address the above problems and secure grids, we present a novel automated trust negotiation framework, FORT, to establish trust relationship between service providers and service requesters. FORT is decentralized, so it scales well. Furthermore, we utilize attribute constraints to refine its language. This paper implements FORT and designs experiments to evaluate its performance. Experimental results show that FORT can effectively protect sensitive services at the cost of little performance of systems and scale well.
TOWER: Practical Trust Negotiation Framework for Grids.

Jianxin Li,Jinpeng Huai,Jie Xu,Yanmin Zhu,Wei Xue

DOI: https://doi.org/10.1109/e-science.2006.145

2006-01-01

Abstract:In order to establish trust relationship between service requesters and providers in an open decentralized environment, we propose a novel trust negotiation framework, TOWER, which integrates distributed trust chain construction of trust management and aims to enhance the grid security infrastructure. Our approach leverages attribute-based credentials to support flexible delegation, and dynamically constructs trust chains. A novel TRust chAin based Negotiation Strategy (TRANS) is proposed to establish trust relationship on the fly by gradually disclosing credentials according to various access control policies. Our approach has been successfully implemented as useful components and fundamental security services in the CROWN Grid, and techniques such as trust tickets and policy caching that can greatly increase service efficiency are used. Finally, we evaluate our approach by comprehensive experiments and the results show that it is feasible.
Security Quantifying Method and Enhanced Mechanisms of TNC

罗安安,林闯,王元卓,邓法超,陈震

DOI: https://doi.org/10.3724/SP.J.1016.2009.00887

2009-01-01

Chinese Journal of Computers

Abstract:Trusted Network Connect (TNC) is considered as an important part of trusted network architecture, and with its deeper research and application development, whether it is enough trustworthy during TNC platform authentication and access control becomes a key problem. In the paper, we mainly focus on the trustworthy problem of TNC. First, we proposed a novel security quantifying method which is based on semi-Markov processes. And then, according to the potential threat and security holes during typical message flow and access authorization process in TNC specification, we proposed a set of trustworthy enhanced mechanisms, which is verified by our security quantifying method. Finally a TNC prototype system framework based on IXP2400 network processor is built to be a performance evaluation and trustworthy verification platform.
Research on a New Infrastructure of Trustworthy Networks

ZHANG Min,LUO Guang-chun

DOI: https://doi.org/10.3969/j.issn.1001-0548.2007.06.012

2007-01-01

Abstract:The application security problem of Internet is far from being completely solved. In this paper, some basic concepts and critical issues in trustworthy computer network are first introduced. Then an architecture of trustworthy network, and host Identity Protocol as end system identity, is proposed to make sure communicate trustworthy.
Towards Automated Trust Negotiation for Grids

Shangyuan Guan,Xiaoshe Dong,Yiduo Mei,Weiguo Wu,Zhenghua Xue

DOI: https://doi.org/10.1109/ICNSC.2008.4525201

2008-01-01

Abstract:Trust is an important aspect of decision making for grid applications. It has been a fundamental but challenging problem to gain assurance of the trustworthiness of service providers or requesters. This paper proposes a novel trust negotiation framework, ENVOY, to establish trust relationship between service providers and requesters in grids. ENVOY supports various kinds of delegation by leveraging attribute-based credentials and defines delegation range expediently by using attribute constraint, and we develop a negotiation strategy based on protection tree to support ENVOY, which provides the support for protection of sensitive information of the two negotiation parties. Moreover, ENVOY employs multithreaded technology and trust ticket to speed up negotiation. This paper describes the implementation of ENVOY and designs experiments to evaluate its performance, and the experimental results show that it is applicable.
Research on Formal Description and Verification of Automated Trust Negotiation

GUAN Shang-yuan,WU Wei-guo,DONG Xiao-she,QIAN De-pei

DOI: https://doi.org/10.3969/j.issn.1000-436x.2011.02.013

2011-01-01

Abstract:First,a unified ATN formal framework was presented,into which typical negotiation strategies could be reduced.Second,the formal verification of ATN was defined based on the formal framework.The objectives and procedures of the formal verification of ATN were described.Third,several typical negotiation strategies were discussed,and the computational complexity of the corresponding verification problems was shown,several conclusions had been obtained.Last,the formal verification of ATN was implemented by using logic programming and model checking methods.The experimental results show that the number of rules is a crucial factor in determining the runtime.Both logic programming and model checking are efficient when the number of transition rules is small,and logic programming does not scale as well as model checking.
Study on trust based P2P network security management

Wu Liu,HaiXin Duan,Hong Zhang,Jianping Wu

2008-01-01

Abstract:The trust mechanism was introduced to dynamically evaluate user's behavior in P2P network, and bind user's reputation with its access control privilege in the network. In addition, the trust based dynamic access control mechanism and key algorithm was proposed and implemented. With the trust based network security management system implemented based on the trust mechanism, a malicious user will be kicked out from the network system and refused from accessing resources of the network automatically when the user's reputation is lower than some threshold.
Towards Automated TrustNegotiation Forgrids

Shangyuan Guan,Xiaoshe Dong

2007-01-01

Abstract:Trust isanimportant aspect ofdecision makingfor gridapplications. Ithasbeenafundamental butchallenging problemtogainassurance ofthetrustworthiness ofservice providers orrequesters. Thispaperproposes a noveltrust negotiation framework, ENVOY,toestablish trust relationship betweenservice providers andrequesters ingrids. ENVOY supportsvariouskindsof delegation by leveraging attribute-based credentials and defines delegation range expediently byusingattribute constraint, andwe develop a negotiation strategy basedon protection treetosupport ENVOY,whichprovides thesupport forprotection ofsensitive information ofthetwonegotiation parties. Moreover, ENVOY employs multithreaded technology andtrust ticket tospeedup negotiation. Thispaperdescribes theimplementation of ENVOY anddesigns experiments toevaluate itsperformance, andtheexperimental results showthatitisapplicable. I.INTRODUCTION GRIDemphasizes large scale resource sharing across Jadministrative domains orsecurity domains inaflexible, secure, andcoordinated fashion (1). Asgrid transfers froma purely scientific community toaheterogeneous, commercial, opencommunity, itenters an environment ofmutual suspicion (2). Malicious users maydamage grids bystealing sensitive information. Therefore, themostsignificant challenge forgrid computing istodevelop acomprehensive setofmechanisms andpolicies forsecuring grids, oneof whichistheenforcement ofaccess control. Accesscontrol ingrids istypically provided by a combination ofidentity certificates andlocal accounts (3). Unfortunately, traditional access control methods based on theidentity ofusersisineffective andcannot scale well because thenumberofusers andservices islarge andtheir population isdynamic. Furthermore, service provider and usermaybefromdifferent security domains whichmight maintain different security policies, possibly without prior knowledge ofeachother. Therefore, ithasbeena fundamental butchallenging problem togain assurance ofthe trustworthiness oftheservice provider orusers. A promising approach toaccess control, Automated Trust Negotiation (ATN)(4), iswell-suited forgrids because it allows thetwonegotiation parties establish trust bygradually andinteractively disclosing credentials andaccess control policies while preserving their privacy. However, there are somelimitations ondelegation andnegotiation strategy in

New Secure Trust Negotiation Strategy Algorithm

A Complete and Efficient Strategy Based on Petri Net in Automated Trust Negotiation

An Efficient and Minimum Sensitivity Cost Negotiation Strategy in Automated Trust Negotiation

Automated trust negotiation based on security level

Formal security analysis of automated trust negotiation

Anonymous authorization in trust management

Distributed Certification Application Via a Trusted Dealer

A Distributed Trust Management Based on Authorizing Negotiation in Open and Dynamic Environments

An Attribute-Constraints-Oriented Automated Trust Negotiation Model

Automated Trust Negotiation Based on Concurrent Zero-Knowledge for e-Business Applications

A description logic-based policy compliance checker for trust negotiation

Formal Analysis and Verification of Security for Automated Trust Negotiation

Secure Routing Strategy Based on Attribute-Based Trust Access Control in Social-Aware Networks

A Novel Automated Trust Negotiation Framework for Securing Grids

TOWER: Practical Trust Negotiation Framework for Grids.

Security Quantifying Method and Enhanced Mechanisms of TNC

Research on a New Infrastructure of Trustworthy Networks

Towards Automated Trust Negotiation for Grids

Research on Formal Description and Verification of Automated Trust Negotiation

Study on trust based P2P network security management

Towards Automated TrustNegotiation Forgrids