Credentials Sensitive Attribute Protection in Trust Negotiation

The proposed framework took into account all aspects related to trust management,from the XML-based combining credential with policy language,to trust management enforcement which implemented verifying trust ticket and compliance checker.

It leverages attribute-based credential to support various kinds of delegation, where attribute parameters constrains and delegation constrains are also employed.

Meanwhile,the ABAM specifies the format of a meta access control policy,and adopts credentials with flexible format to meet the requirements of access control policies instead of disclosing the whole contents of a certificate.

The negotiation strategy specifies how the negotiation process executes and determines the exchanges of credentials and access control policies.

Research on Distributed Trust Certificates Storage and Searching Algorithms

Premising that two parties participating in interaction use PKI & Kerberos as their authentication schemes,this will cause some problem of credential converting,so we design a new credential converting system to solve this effectively,and also design a new access control model to simplify this process using blacklist/whitdist scheme.