RBTN: A Role-Based Trust Negotiation Model

Abstract

TN/ATN is a new approach for establishing trust between strangers through the exchange of digital credentials and the use of access control policies. However, in TN/ATN, a user has to negotiate with the server each time he requests several resources or services from it and disclose credentials even if he had disclosed it before. In this paper, a Role-Based Trust Negotiation model (called RBTN) is proposed. RBTN introduces the role concept to trust negotiation, and assigns roles to users according to their credentials, which are disclosed during the previous negotiations. Thus RBTN can reduce the rounds of negotiation when one visits several resources or services one time. In the paper, we have a detailed description of RBTN. Thereto, a use case is given to show how the model works, which illustrates that RBTN is sound and reasonable.