Research And Implementation On Reconfigurable And Open Trust Negotiation Framework

With the rapid development of networking technologies, a large number of networkapplications are emerging and service-centered systems for resources sharing and taskscoordination are more and more attracitive. Under this kind of open distributed systemsenvironment, the completion of jobs requires the cooperation and coordination of subjectswhich belong to different security management domains. How to effectively, securely anddynamically establish trust across security areas has become a hot topic in the current studyof security. Automated Trust Negotiation (ATN) can establish mutual trust between servicerequestor and provider to achieve resources sharing and coordinative working by means ofiteratively disclosing credentials and access control policies.In this Paper, we describe the design of ATN-Framework, a fully-configurable andextensible framework for prototyping and evaluating trust negotiation systems. The maincontributions in this work are as follows:1. This paper provides an ATN-Framework and describes the primary data structuresand the flow of data between major system components. It shows how theexisting token based security model described by the WS-Policy standard can beused to specify ATN policies; it also proposes an extension to WS-Trust’sframework that can be used to facilitate ATN sessions in a fullystandards-compliant manner.2. This paper introduces the functional modules of ATN-Framework wtih the designand implementation of major components consisted in the architecture．3. This paper proposes the policy within the sensitive credentials to preserveprivacy., and the the optimizing strategy to present to eliminate the duplicate disclosures during ATN.