Some thoughts on agent trust and delegation

ABSTRACT

In this paper, we are going to show how to build up agent-oriented Public Key Infrastructure(PKI) from SPKI/SDSI and X.509 standards. A variety of delegation mechanisms for agents will be demonstrated under this agent-oriented PKI. The mechanisms include: chain-ruled, threshold, and conditional. The lack of agent security management standards did not allow us to do the agent trust and delegation in legalized manner so we proposed several new communicative acts to satisfy our agent delegation management. Finally, we briefly show how to implement these agent communication language and inner content language in XML and XML/RDF.

REFERENCES

• 1: Martín Abadi , Michael Burrows , Butler Lampson , Gordon Plotkin, A calculus for access control in distributed systems, ACM Transactions on Programming Languages and Systems (TOPLAS), v.15 n.4, p.706-734, Sept. 1993 [doi>10.1145/155183.155225]
• 2: T. Aura, On the Structure of Delegation Networks, Proceedings of the 11th IEEE Computer Security Foundations Workshop, p.14, June 09-11, 1998
• 3: Tuomas Aura, Distributed access-rights management with delegation certificates, Secure Internet programming: security issues for mobile and distributed objects, Springer-Verlag, London, 2001
• 4: Castelfranchi, Cristiano and Falcone, Rino, Trust and Control: A Dialectic Link, Applied Artificial Intelligence, 14:799-823, 2000.
• 5: Clarke, Dwaine, et al., Certificate Chain Discovery in SPKI/SDSI(draft), MIT Lab for Computer Science, Nov. 1999.
• 6: Ellison, M. Carl, et al., SPKI Certificate Theory, RFC 2693, Internet Society, 1999,
• 7: FIPA 97 Specification Part 2, Version 2.0, Agent Communication Language, 1998.
• 8: FIPA 98 Specification Part 10, Version 1.0, Agent Security Management, 1998.
• 9: FIPA ACL Message Representation in XML Specification, 2000.
• 10: FIPA RDF Content Language Specification, 2000.
• 11: Warwick Ford , Michael S. Baum, Secure electronic commerce: building the infrastructure for digital signatures and encryption, Prentice-Hall, Inc., Upper Saddle River, NJ, 1997
• 12: Gerck, Ed, Toward Real-World Models of Trust: Reliance on Received Information, http://www.mcg.org.br/trustdef.htm.
• 13: Gladney, H., Safe Deals Between Strangers, IBM Research Technical Report(draft), IBM Almaden Research Center, August, 1999.
• 14: Grosof, N. Benjamin and Labrou, Yannis, An Approach to using XML and a Rule-based Content Language with an Agent Communication Language, IBM Research Report, RC 21491(96965) 28 May 1999.
• 15: Qi He , Katia P. Sycara , Timothy W. Finin, Personal security agent: KQML-based PKI, Proceedings of the second international conference on Autonomous agents, p.377-384, May 10-13, 1998, Minneapolis, Minnesota, United States [doi>10.1145/280765.280865]
• 16: Carey Heckman , Jacob O. Wobbrock, Liability for autonomous agent design, Proceedings of the second international conference on Autonomous agents, p.392-399, May 10-13, 1998, Minneapolis, Minnesota, United States [doi>10.1145/280765.280869]
• 17: Amir Herzberg , Yosi Mass , Joris Michaeli , Yiftach Ravid , Dalit Naor, Access Control Meets Public Key Infrastructure, Or: Assigning Roles to Strangers, Proceedings of the 2000 IEEE Symposium on Security and Privacy, p.2, May 14-17, 2000
• 18: Nicholas R. Jennings , Katia Sycara , Michael Wooldridge, A Roadmap of Agent Research and Development, Autonomous Agents and Multi-Agent Systems, v.1 n.1, p.7-38, 1998 [doi>10.1023/A:1010090405266]
• 19: Audun Jøsang , Ingar Glenn Pedersen , Dean Povey, PKI Seeks a Trusting Relationship, Proceedings of the 5th Australasian Conference on Information Security and Privacy, p.191-205, July 10-12, 2000
• 20: Steven O. Kimbrough , Scott A. Moore, On automated message processing in electronic commerce and work support systems: speech act theory and expressive felicity, ACM Transactions on Information Systems (TOIS), v.15 n.4, p.321-367, Oct. 1997 [doi>10.1145/263479.263480]
• 21: Butler Lampson , Martín Abadi , Michael Burrows , Edward Wobber, Authentication in distributed systems: theory and practice, ACM Transactions on Computer Systems (TOCS), v.10 n.4, p.265-310, Nov. 1992 [doi>10.1145/138873.138874]
• 22: Li, N., Grosof, N. B., and Feigenbaum. J., A Logic-based Knowledge Representation for Authorization with Delegation, IBM Research Report, RC 21492(96966) 28 May 1999.
• 23: Ninghui Li , Benjamin Grosof , Joan Feigenbaum, A Practically Implementable and Tractable Delegation Logic, Proceedings of the 2000 IEEE Symposium on Security and Privacy, p.27, May 14-17, 2000
• 24: Moukas, A., Guttman, R., Zacharia, G., and Maes, P., Agent-mediated Electronic Commerce: An MIT Media Laboratory Perspective. International Journal of Electronic Commerce, Vol. 4 , No. 3, Spring 2000.
• 25: Hyacinth S. Nwana , Jeff Rosenschein , Tuomas Sandholm , Carles Sierra , Pattie Maes , Rob Guttmann, Agent-mediated electronic commerce: issues, challenges and some viewpoints, Proceedings of the second international conference on Autonomous agents, p.189-196, May 10-13, 1998, Minneapolis, Minnesota, United States [doi>10.1145/280765.280800]
• 26: Rivest, Ron and Lampson, Bulter, SDSI- A Simple Distributed Security Architecture, http://theory.lcs.mit.edu/ cis/sdsi.html.
• 27: Tschudin, F. C., Mobile Agent Security. Intelligent Information Agents: Agent-Based Information Discovery and Management on the Internet, Springer-Verlag, 1999, 431-445.
• 28: Wen, Wu and Mizoguchi, Fumio, An Authorization-Based Trust Model for Multiagent Systems, Applied Artificial Intelligence, 14:909-925, 2000.
• 29: Wong, H. C., and Sycara, K. Adding Security and Trust to Multi-Agent Systems. Proceedings of Autonomous Agents '99 (Workshop on Deception, Fraud and Trust in Agent Societies). May 1999, Seattle, Washington, pp. 149-161.
• 30: Michael Wooldridge, Semantic Issues in the Verification of Agent Communication Languages, Autonomous Agents and Multi-Agent Systems, v.3 n.1, p.9-31, March 2000 [doi>10.1023/A:1010090027213]

INDEX TERMS

Primary Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE

Additional Classification:
  E. Data
  E.3 DATA ENCRYPTION
      Subjects: Public key cryptosystems

  I. Computing Methodologies
  I.7 DOCUMENT AND TEXT PROCESSING
      I.7.2 Document Preparation

          Nouns: XML

  K. Computing Milieux
  K.1 THE COMPUTER INDUSTRY
      Subjects: Standards

General Terms:
Design, Languages, Performance, Standardization, Theory, Verification