Improvement On Feedback Approach For Trust Negotiation

During access control, when a user is denied access to a resource by the system and the feedback information is received, the user's condition satisfies the policy of access control through changing access condition, so the user acquires permissions of access control. During the processing, it is very important for providing feedback about access control decisions to users, the feedback information affects users' activities. A better information feedback approach not only protects any information about the system security and the sensitive information on the system, but also enhances the system usability and the probability of the successful access. To achieve a balance between system usability and the protection of security policies, we need to provide a useful feedback approach.This paper discusses a review of the process of trust negotiation and analyses of the pitfalls of existent feedback approaches for trust negotiation, presents a feedback approach improved for trust negotiation and well solves the problem that the users can't change role to access to resource. The approach improves Know system and increases the rules about policies, modifies weight of cost function about the granularity to thin. We increases Probability Matrix of BIF to modify weight of cost function based-on Know feedback mechanism, that it is smaller for probability, access condition have bigger cost and the weight is bigger.Meanwhile, this paper presents the rules on how to optimize the feedback according to the shortcomings of Know, resolves the problem that the users can't change role to access to resource. The improved feedback approach could limit the alternative of user's accessing to a small and useful set to feedback a list of more possible alternatives to the user.Last, the paper gives an instance to examine the work flow of the feedback approach improved for trust negotiation. Experimental results indicate that this mechanism not only protects the sensitive information on the system, but also enhances the system usability and the probability of the successful access.