| 摘要: |
| 属性证书交换是一种在不同安全域里共享资源或进行商业事务交易的陌生人之间建立双方信任关系的重要手段.自动信任协商则通过使用访问控制策略提供了一种方法来规范敏感证书的交换,从而保护了用户的敏感证书信息、敏感访问控制策略与个人隐私,以及提高协商效率和协商成功率.对自动信任协商的研究动态进行了调研,对该领域的相关技术进行了归类及介绍.在认真分析现有技术的基础上,总结了当前自动信任协商的不足,并指出了自动信任协商继续发展应遵守的原则以及自动信任协商的未来发展趋势. |
| 关键词: 自动信任协商 认证 证书 授权 访问控制策略 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Natural Science Foundation Important Special Project of China under Grant No.90412010 (国家自然科学基金重大项目); the National Natural Science Foundation of China under Grant No.60503040 (国家自然科学基金) |
|
| 自动信任协商;认证;证书;授权;访问控制策略 |
|
LIAO Zhen-Song,JIN Hai,LI Chi-Song,ZOU De-Qing
|
| Abstract: |
| Exchange of attribute credentials is an important means to establish mutual trust between strangers who wish to share resources or conduct business transactions. Automated trust negotiation (ATN) is an approach to regulate the exchange of sensitive credentials by using access control policies, so as to protect sensitive credentials, policies and private privacy, and to improve negotiation efficiency and successful negotiation establishment rate. A detailed review of the research on ATN is presented based on the survey and classification of the current negotiation techniques. According to the precise investigation on ATN, the pitfalls of ATN are pointed out and the reasonable rules that ATN should observe are put forward, meanwhile, the development trend for ATN is proposed. |
| Key words: ATN (automated trust negotiation) authentication credential authorization access control policy |
