Using trust and risk in role-based access control policies

ABSTRACT

Emerging trust and risk management systems provide a framework for principals to determine whether they will exchange resources, without requiring a complete definition of their credentials and intentions. Most distributed access control architectures have far more rigid policy rules, yet in many respects aim to solve a similar problem. This paper elucidates the similarities between trust management and distributed access control systems by demonstrating how the OASIS access control system and its rôle-based policy language can be extended to make decisions on the basis of trust and risk analyses rather than on the basis of credentials alone. We apply our new model to the prototypical example of a file storage and publication service for the Grid, and test it using our Prolog-based OASIS implementation.

REFERENCES

• 1: Alfarez Abdul-Rahman , Stephen Hailes, Supporting Trust in Virtual Communities, Proceedings of the 33rd Hawaii International Conference on System Sciences-Volume 6, p.6007, January 04-07, 2000
• 2: Karl Aberer , Zoran Despotovic, Managing trust in a peer-2-peer information system, Proceedings of the tenth international conference on Information and knowledge management, October 05-10, 2001, Atlanta, Georgia, USA [doi>10.1145/502585.502638]
• 3: Ashton Applewhite. Getting the Grid. IEEE Distributed Systems Online, May 2002.
• 4: Jean Bacon , Ken Moody , Walt Yao, Access Control and Trust in the Use of Widely Distributed Services, Proceedings of the IFIP/ACM International Conference on Distributed Systems Platforms Heidelberg, p.295-310, November 12-16, 2001
• 5: Jean Bacon , Ken Moody , Walt Yao, A model of OASIS role-based access control and its support for active security, ACM Transactions on Information and System Security (TISSEC), v.5 n.4, p.492-540, November 2002 [doi>10.1145/581271.581276]
• 6: Matt Blaze , Joan Feigenbaum , Jack Lacy, Decentralized Trust Management, Proceedings of the 1996 IEEE Symposium on Security and Privacy, p.164, May 06-08, 1996
• 7: Marco Carbone, Mogens Nielsen, and Vladimiro Sassone. A formal model for trust in dynamic networks. Research Series RS-03-04, BRICS, Department of Computer Science, University of Aarhus, January 2003. EU Project SECURE IST-2001-32486 Deliverable 1.1.
• 8: Nathan Dimmock, How much is "enough"? Risk in Trust-Based Access Control, Proceedings of the Twelfth International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises, p.281, June 09-11, 2003
• 9: Tyrone Grandison and Morris Sloman. A survey of trust in internet applications. IEEE Communications Society, Surveys and Tutorials, 3(4), 2000.
• 10: ISO/IEC JTC1/SC22 Working Group. ISO/IEC 9899 - Programming languages - C, 1999.
• 11: Audun Jøsang, A logic for uncertain probabilities, International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, v.9 n.3, p.279-311, June 2001
• 12: Audun Jøsang, Elizabeth Gray, and Michael Kinateder. Analysing topologies of transitive trust. In Proceedings of the Workshop of Formal Aspects of Security and Trust (FAST), September 2003.
• 13: Lalana Kagal , Tim Finin , Anupam Joshi, Trust-Based Security in Pervasive Computing Environments, Computer, v.34 n.12, p.154-157, December 2001 [doi>10.1109/2.970591]
• 14: Ninghui Li , John C. Mitchell , William H. Winsborough, Design of a Role-Based Trust-Management Framework, Proceedings of the 2002 IEEE Symposium on Security and Privacy, p.114, May 12-15, 2002
• 15: Jean-Marc Seigneur, Stephen Farrell, Christian Damsgaard Jensen, Elizabeth Gray, and Chen Yong. End-to-end trust in pervasive computing starts with recognition. In Proceedings of the First International Conference on Security in Pervasive Computing, 2003.
• 16: Li Xiong and Ling Liu. Building trust in decentralized peer-to-peer electronic communities. In The 5th International Conference on Electronic Commerce Research, October 2002.
• 17: Walt Teh-Ming Yao. Fidelis: A policy-driven trust management framework. In Proc. of the 1st Intern'l Conf. on Trust Management, number 2692 in LNCS. Springer-Verlag, May 2003.
• 18: Bin Yu , Munindar P. Singh, An evidential model of distributed reputation management, Proceedings of the first international joint conference on Autonomous agents and multiagent systems: part 1, July 15-19, 2002, Bologna, Italy [doi>10.1145/544741.544809]
• 19: Bharat K. Bhargava , Yuhui Zhong, Authorization Based on Evidence and Trust, Proceedings of the 4th International Conference on Data Warehousing and Knowledge Discovery, p.94-103, September 04-06, 2002

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.4 Distributed Systems

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

General Terms:
Security

Keywords:
OASIS, SECURE, access control, risk, trust