Abstract: Trust negotiation is an approach to build trust relationship between strangers by disclosing attribute credentials alternately. This paper analyses disadvantage of existing research in trust negotiation, and then we give the definition of obligation action and constrain. According to the definition of state-transition system, an abstract model is proposed, which depicts not only the alternation but also the autonomy. Finally, we extend the Ack policy to discuss the problem of protecting sensitive information.

Key words: access control, state-transition system, credential, trust negotiation

摘要： 信任协商是分布式环境下陌生实体通过交替地披露属性证书建立信任关系的有效方法.分析了现有研究的不足,给出了职责行为和约束条件的定义,并在此基础上引入状态变化系统,定义了信任协商抽象模型.该模型不仅刻画了协商实体之间的交互性,而且也刻画了授权操作的自主性.最后提出了扩展的Ack策略,对敏感信息的保护进行了分析.

关键词: 访问控制, 状态变换系统, 信任证, 信任协商