Research On Petrinet-based Automated Trust Negotiation

When the new applications and new technologies are developing in the Internet, the interaction between entities and the sensitivity between the shared resources has became confidence-building barrier. So the trust relationship between the strange entities is the key issue of today's network security, and it is also a hot research direction. Automated Trust Negotiation (ATN) is a new, effective solution to for this problem.Automated Trust Negotiationl (ATN) technology can take advantage of the various existing security authentication technology to manage the exchange of authentication information between entities by analyzing the entity's resource access policies, it's not only able to build trust relationships between entities, but also well protect the entity's key information. Automated trust negotiation strategy is the core issue of trust negotiation, it describes how to get the viable entities exchange of information by analysis the resource access policy. Therefore, how to extract the key conclusion of the automated trust negotiation techniques, how to accurately define and describe the trust negotiation strategies, and how to build reasonable modeling of trust negotiation strategies and give out a reasonable analysis are the key problems of this study.In this paper, several key technologies of ATN in the Peer-to-Peer network environment are researched, the basic concept of ATN are summed up, and some concept are strictly redefinition. The innovation is that the consultation process is divided into two parts:access control policy and security strategy for unlocking, which could be help to the model building below and the reader's understanding;Then after analyzing ACP of ATN for access control policy and the the logical relationship of the access control policy elements, as well as the feasibility of PetriNet modeling method of ATN, a base model is established.The innovation is that a new modeling method for trust negotiation policy which is based on the PetriNet model is proposed. The method maps resouces, credentials and access po licies to Petri Net components, by which the negotiation is modelized to Petri net model, through VC Program to design a ATN-PN prototype system, and using an example to seek the most optimal strategy for the security unlock process, it could verify that the work of this paper can effectively solve the optimal n unlock problem.Then, compared to other modeling methods, demonstrate whatever in terms of algorithms, or in the final get unlock sequence optimization, the method of based on PetriNet modeling and analysis are efficient and complete, it could be effectively reduced the number of the exchange of trustpermits, and reduce the network overhead, and as far as possible to ensure the success rate of consultations, in the all, it is superior to the currently used modeling and analysis method.Finally, the lack of ATN principles is summarized in this article, and the direction of future research papers is pointed out.