关键词: 自动信任协商, 协商策略, 信任凭证, 访问控制策略

Abstract: Automated Trust Negotiation is a new approach to establish trust relationship between strangers of different security domains on the network.The negotiation strategy specifies how the negotiation process executes and determines the exchanges of credentials and access control policies.Most research on negotiation strategy treat all credentials with the same sensitivity.The credential weight is introduced to solve the problem.A strategy based on the tree with weight is designed under the idea of local optimization.The entity will always choose the credential with the lowest weight to request for disclose until the negotiation ends with success or failure.The strategy is proved to be safe，complete and efficient.

Key words: Automated Trust Negotiation（ATN）, negotiation strategy, credential, access control policy