An Introduction to Trust Negotiation

Marianne Winslett
University of Illinois at Urbana-Champaign

Automated trust negotiation is a new approach to access control and authentication for the open, flexible systems formed by sets of organizations that must dynamically form coalitions and work together to respond to unforeseen needs and opportunities. Automated trust negotiation enables open computing by assigning an access control policy to each resource that is to be made accessible to “outsiders”; an attempt to access the resource triggers a trust negotiation, consisting of the iterative, bilateral disclosure of digital credentials and related information. In this talk, I will motivate the need for trust negotiation, explain how it works in simple situations, describe how it can be used in example applications, and present recent research directions and opportunities for future research.