Toward acceptable metrics of authentication

Reiter, Mike; Stubblebine, Stuart G.

doi:10.1109/secpri.1997.601308

Cited by 49 publications

(60 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Hence we disagree at a conceptual level with the approach taken by Beth, Borcherding and Klein [3] and principle 2 of Reiter and Stubblebine [16,14]: it is not necessary to define the parameters (i.e., the confidence values) of an authentication method as "negative and positive experiences" or frequencies.…”

Section: Contributions Of This Pap Ermentioning

confidence: 76%

See 1 more Smart Citation

Confidence Valuation in a Public-Key Infrastructure Based on Uncertain Evidence

Kohlas

Maurer

2000

Public Key Cryptography

View full text Add to dashboard Cite

Abstract. Public-key authentication based on public-key certificates is a special case of the general problem of verifying a hypothesis (that a public key is authentic), given certain pieces of evidence. Beginning with PGP, several authors have pointed out that trust is often an uncertain piece of evidence and have proposed ad hoc methods, sometimes referred to as trust management, for dealing with this kind of uncertainty. These approaches can lead to counter-intuitive conclusions as is demonstrated with examples in the PGP trust management. For instance, an introducer marginally trusted by a user can make him accept an arbitrary key for any other user. In this paper we take a general approach to public-key authentication based on uncertain evidence, where not only trust, but also other pieces of evidence (e.g. entity authentication) can be uncertain. First, we formalize the assignment and the valuation of confidence values in the general context of reasoning based on uncertain evidence. Second, we propose a set of principles for sound confidence valuation. Third, we analyze PGP and some other previous methods for dealing with uncertainty in the light of our principles.

show abstract

Section: Contributions Of This Pap Ermentioning

confidence: 76%

“…Nevertheless, interpreting this parameter as a probability of 0.8 makes sense. This is a point that is often misunderstood [3,16,14]. Of course, the parameters are generally based also on some form of past experience, but such experience almost never arises in the form of relative frequencies.…”

Section: Contributions Of This Pap Ermentioning

confidence: 99%

Confidence Valuation in a Public-Key Infrastructure Based on Uncertain Evidence

Kohlas

Maurer

2000

Public Key Cryptography

View full text Add to dashboard Cite

show abstract

“…Therefore, we validate our model on the basis of some relevant principles (e. g., proposed in [20,19] and [17]) and on aspects, which have been criticized in other trust models.…”

Section: Discussionmentioning

confidence: 99%

“…Unlike the models using operators to combine two opinions, Maurer proposes to calculate the resulting trust value on the basis of probability calculus instead and avoids thus the above-mentioned trust graph evaluation problem. However, the trust model is limited to public key authentication, and it has been criticised to make the restricting implicit assumption, that each principal holds exactly one key pair [19].…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

A Trust Model for an Open, Decentralized Reputation System

Gutscher

IFIP International Federation for Information Processing

View full text Add to dashboard Cite

Summary. The use of reputation systems has been proposed for various applications, e. g., to estimate the trustworthiness of sellers and buyers in electronic transactions. Reputation systems collect opinions of users about properties of certain services, subjects and other users and evaluate these opinions. It is important that the results of reputation systems are consistent with intuitive expectations of its users, which highly depends on the properties of the underlying trust model. The trust model defines the representation of the trust values as well as the computation of trust values for derived trust relations.We propose a new sophisticated computational model of trust which seamlessly integrates authentication verification into the trust evaluation process and which is suitable especially for open, decentralized reputation systems. It consists of definitions of trust and authentication relations, inference rules and three downward compatible trust calculi. It is therefore possible to represent and evaluate trust values with different levels of detail. The model reflects all relevant aspects and properties of trust and authentication relations and therefore avoids any counterintuitive effects.

show abstract