Research Of Negotiation Mechanism In Automated Trust Negotiation

Negotiation Mechanism (NM), which is core component of ATN, is an effective way to build trust for P2P systems that across multiple security domains. Currently, however, existing NMs commonly have deficiencies such as low efficiency, low security and so on。Furthermore, they can not guarantee that access control polices (ACP) and credentials that disclosed during trust negotiation procedure do not be used illegally either. So, how to improve the efficiency of the negotiation, how to effectively protect the information disclosed during negotiation procedure and how to avoid illegally uses of them is the focus of this dissertation.An improved NM known as Feed-Forward Multi-Phases Negotiation Mechanism (FMP NM) based on the analyses of current NMs is presented in this dissertation. Two additional components composite the FMP NM compared with traditional NM. The first one is a kind of control mechanism which based on CBR and is designed to solve the problem of low negotiation efficiency. The second one is a kind of information exchange mechanism which is designed to solve the problem of low after-negotiation-process security.Based on the abstract description of negotiation procedure, FMP NM+ absorbs the manipulation and prediction mechanism of Case-Based Reasoning (CBR). It sends control signals such as how to continue current negotiation procedure, whether it is necessary to continue or shortly, cancel the procedure for efficiency. It provably leads to a more efficient negotiation procedure.Information exchange mechanism with additional signature is implemented by generating receiver info to the exchanged info to protect the info security and defense the owner's behalf. Because of the signature's property of non-repudiation and verifiability, the owner could maintain its interests effectively if the receiver reuses the info illegally.Compared with other strategies, the simulation experiment indicated that, FMP NM provides higher effective behaviors and provides resolutions to the security problem listed above.