Method for building hierachical trust model in open system

Abstract

The invention discloses a method for establishing level trust model in an open system. According to the characteristic of trust and the characteristic of the open system, the method divides the element which effects trust into two layers, bottom layer and basic trust layer. The element comprises property, recommendation and experience. The method mainly solves the initial trust creation of a strange entity. The upper layer is a trust layer, determined by application context. The application trust layer is established on the base of the basic trust layer. The invention can be applied in open system for safety decision-making, has the advantages of extensibility and good maneuverability, etc.

Description

Technical field [0001] The invention relates to a method for establishing a trust model of an open system, which ensures the safety of the open system by establishing a trust relationship. Background technique [0002] Trust is the cornerstone of security. In an open system, since there is no prior trust relationship between entities, it cannot be guaranteed whether the device interacting with you is trustworthy, whether the user's private information can be protected, whether the data can be transmitted safely, etc. Establishing a trust relationship is the basis for ensuring the security of an open system. [0003] Trust management is a set of methods for managing trust. It is a new method to solve large-scale, open distributed system authorization. Trust management can be divided into policy-based trust management and reputation-based trust management according to the different ways of establishing trust relationship. [0004] The establishment of trust relationship in...

AI Technical Summary

Problems solved by technology

The method of policy consistency verification is used for security measurement and decision-making. This method is too precise and cannot well adapt to the variability and uncertainty in a distributed environment.

[0007] (2) Single Security Analysis Entity

Trust management only considers the security protection of the service party, but does not consider the security issues of the service caller

[0008] (3) Trust management has actually implied a trust relationship, without explaining why it is necessary to trust

[0009] (4) It is impossible to meet the changes of dynamic security environment in real time, the ability and efficiency of security policy verification are limited, and most trust management systems must collect enough security trust certificates before the verification of policy consistency proof

[0010] (5) The process of formulating security policies is relatively complicated, which hinders the application of trust management systems

(2) The current trust model is a flat structure, which is poor in operability

Images