A Semantic Approach for Trust Information Exchange in Federation Systems

Abstract

In federation systems, management of trust is critical for information sharing and online collaboration. Security tokens provide a way to convey and exchange trust information for security and privacy protection. Although several communication protocols have mechanisms to exchange security tokens, users may still encounter difficulties when they have to handle security tokens across heterogeneous platforms and trust domains. Semantic gaps and incompatibilities are major barriers for trust information exchange in federated trust management. This paper introduces a hybrid approach with intermediary- and query-based mechanisms to resolve semantic gaps and incompatibilities for different types of trust information exchanged by security tokens, and then proposes different exchange models for different types of trust information. This paper also provides a comprehensive framework to exchange security tokens across trust domains using these mechanisms and models. Application of this framework in a healthcare environment is also discussed.