Negotiating trust in the Web
IEEE Internet ComputingPublished 1 November 2002
Marianne Winslett, Ting Yu, Kent Seamons, Adam Hess, J. Jacobson, Ryan Jarvis
Citations257
SJR quartileQ1
SJR score0.99
SNIP1.51
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This system is intended for use in any situation where two entities from different security domains need to establish trust - business-to-business and retail interactions, cooperative work and joint ventures, medical records, mobile computing, and so on.
Abstract
Our system, TrustBuilder, supports automated trust negotiation between strangers on the Internet. TrustBuilder lets negotiating parties disclose relevant digital credentials and access control policies and establish the trust necessary to complete their interaction. TrustBuilder is intended for use in any situation where two entities from different security domains need to establish trust - business-to-business and retail interactions, cooperative work and joint ventures, medical records, mobile computing, and so on.
Keywords
Social SciencesComputer Science
SPKI Certificate Theory
753 Citations1999Carl Ellison, Bill Frantz +4 more
A mechanism for deriving authorization decisions from a mixture of certificate types was developed and is presented in this document and a canonical form for those S-expressions is defined.
The KeyNote Trust-Management System Version 2
657 Citations1999Matt Blaze, Joan Feigenbaum +2 more
This memo describes version 2 of the KeyNote trust-management system, which specifies the syntax and semantics of KeyNote `assertions', describes `action attribute' processing, and outlines the application architecture into which a KeyNote implementation can be fit.
SSL and TLS: Designing and Building Secure Systems
419 Citations2000Eric Rescorla
The Story So Far: Protecting Secrets in Memory, a Simple Secure Messaging System, and Coding with SSL, which describes the challenges of designing and implementing such a system.
Access control meets public key infrastructure, or: assigning roles to strangers
388 Citations2002Amir Herzberg, Yosi Mass +3 more
The Trust Policy Language is presented, used to define the mapping of strangers to predefined business roles, based on certificates issued by third parties, and a simple, modular architecture and easy migration from existing systems is presented.
ACM Transactions on Information and System SecuritySupporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation
302 Citations2003Ting Yu, Marianne Winslett +1 more
This paper shows how to model the information flow of a negotiation for use in analyzing strategy interoperation, and develops the theory for black-box propositional credentials as well as credentials with internal structure and for access control policies whose contents are (respectively are not) sensitive.
SD3: a trust management system with certified evaluation
272 Citations2002Trevor Jim
SD3, a trust management system consisting of a high-level policy language, a local policy evaluation, and a certificate retrieval system, is introduced and it is shown how to implement a secure name service entirely in SD3.
Regulating service access and information release on the Web
187 Citations2000Piero A. Bonatti, Pierangela Samarati
This work proposes an approach for regulating service access and information disclosure on the Web that consists of a uniform formal framework that provides a means for parties to communicate their requirements while ensuring that no private information be disclosed and that the communicated requirements are correct.
Limiting the Disclosure of Access Control Policies during Automated Trust Negotiation.
164 Citations2001Kent Seamons, Marianne Winslett +1 more
This paper shows that access control policies can also contain sensitive information that should be protected from inappropriate access by strangers during negotiation, and presents and analyzes two automated trust negotiation strategies that support protection for access control Policies.
Requirements for policy languages for trust negotiation
151 Citations2003Kent Seamons, Marianne Winslett +6 more
A model for trust negotiation is described, focusing on the central role of policies, which relies on access control policies that govern access to protected resources by specifying credential combinations that must be submitted to obtain authorization.
Distributed credential chain discovery in trust management
99 Citations2001Ninghui Li, William H. Winsborough +1 more
A type system for credential storage that guarantees well-typed, distributed credential chains can be discovered and that evaluation based on reachability in credential graphs is sound and complete with respect to the set-theoretic semantics of RTo.
A practically implementable and tractable delegation logic
96 Citations2002Ninghui Li, Benjamin N. Grosof +1 more
This work addresses the goal of making Delegation Logic into a practically implementable and tractable trust management system and shows that, for this revised version of DL, inferencing is computationally tractable under the same commonly met restrictions for which Ordinary Logic Programs inference is tractable.
Advanced Client/Server Authentication in TLS.
68 Citations2002Adam Hess, J. Jacobson +4 more
The Trust Negotiation in TLS (TNT) protocol is described, an extension to the TLS handshake protocol that incorporates recent advances in trust negotiation into TLS to provide advanced client/server authentication in TLS.
Software Practice and ExperiencePolicy-directed certificate retrieval
67 Citations2000Carl A. Gunter, Trevor Jim
QCM is built, a prototype policy language and verifier that can direct a retrieval mechanism to obtain certificates from the network and shows how the technique greatly simplifies certificate‐based secure applications ranging from key distribution to ratings systems, and that QCM policies are simple to write.
Binding identities and attributes using digitally signed certificates
56 Citations2002J.S. Park, Ravi Sandhu
This work introduces comprehensive approaches to bind identity and attribute certificates, identifying three different techniques: monolithic, autonomic, and chained signatures.
ScholarlyCommons (University of Pennsylvania)Strongman: a scalable solution to trust management in networks
20 Citations2001Angelos D. Keromytis, Jonathan M. Smith
The proposed architecture, named STRONGMAN, demonstrates three new approaches to providing efficient local policy enforcement complying with global security policies, and is the first fully automated access control management system that can scale, both in terms of management and in Terms of performance, to arbitrarily large networks.
Lecture notes in computer scienceRelying Party Credentials Framework
19 Citations2001Amir Herzberg, Yosi Mass