Traust: a trust negotiation based authorization service

  • Authors:
  • Adam J. Lee;Marianne Winslett;Jim Basney;Von Welch

  • Affiliations:
  • Department of Computer Science, University of Illinois at Urbana-Champaign, Urbana, IL;Department of Computer Science, University of Illinois at Urbana-Champaign, Urbana, IL;National Center for Supercomputing Applications, University of Illinois at Urbana-Champaign, Urbana, IL;National Center for Supercomputing Applications, University of Illinois at Urbana-Champaign, Urbana, IL

  • Venue:
  • iTrust'06 Proceedings of the 4th international conference on Trust Management
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this demonstration, we present Traust, a flexible authorization service for open systems. Traust uses the technique of trust negotiation to map globally meaningful assertions regarding a previously unknown client into security tokens that are meaningful to resources deployed in the Traust service's security domain. This system helps preserve the privacy of both users and the service, while at the same time automating interactions between security domains that would previously have required human intervention (e.g., the establishment of local accounts). We will demonstrate how the Traust service enables the use of trust negotiation to broker access to resources in open systems without requiring changes to protocol standards or applications software.