A Flexible Architecture for Privacy-Aware Trust Management

Abstract

In service-oriented systems a constellation of services cooperate, sharing potentially sensitive information and responsibilities. Cooperation is only possible if the different participants trust each other. As trust may depend on many different factors, in a flexible framework for Trust Management (TM) trust must be computed by combining different types of information. In this paper we describe the TAS 3 TM framework which integrates independent TM systems into a single trust decision point. The TM framework supports intricate combinations whilst still remaining easily extensible. It also provides a unified trust evaluation interface to the (authorization framework of the) services. We demonstrate the flexibility of the approach by integrating three distinct TM paradigms: reputation-based TM, credential-based TM, and Key Performance Indicator TM. Finally, we discuss privacy concerns in TM systems and the directions to be taken for the definition of a privacy-friendly TM architecture.

Self-Adaptive Authorization Framework for Policy Based RBAC/ABAC Models

“…We will draw upon work from trust access control [17], and cost associated trust access control [4], in order to build a formal framework for specifying clear controls that prevent wrongful adaptation. For the implementation of SAAF, the intent is to rely on model driven engineering alongside self-adaptation as a potential means of autonomously managing authorization systems.…”

SAFAX – An Extensible Authorization Service for Cloud Environments

“…In addition, some implementations have been used as a backbone for XACML-based frameworks. For instance, Lazouski et al (2014) extend WOS2 Balana for the enforcement of usage control policies in distributed systems, while TAS3 Trust PDP (Böhm et al, 2010) extends SUN-XACML for the evaluation of trust policies. The XACML reference architecture, however, is underspecified, and existing XACML implementations of XACML may have slight variations based on implementation choices.…”

A privacy preserving authorisation system for the cloud

“…The authorization infrastructure service has been tested with three different PDPs: Sun's XACML PDP [19], the PERMIS PDP and a behavioral trust PDP from TU-Eindhoven [20]. Each of these PDPs uses a different policy language.…”