一种基于隐藏证书的自动信任协商模型

自动信任协商是一种通过逐步暴露证书和访问控制策略以确立协商双方信任关系的安全方法。隐藏证书采用椭圆曲线加密的原理，具有极好的安全保密性与数据完整性。本文将隐藏证书引入到自动信任协商系统中，提出了一种基于隐藏证书的自动信任协商模型（简称为HCBATN）。该模型使用隐藏证书来携带并传递双方交换的证书、访问控制策略、资源等信息，充分保护了证书、策略的敏感信息以及用户个人隐私；同时具有单轮回证书交换、较小的网络开销、较低的证书保存、较高安全保密性等优点。

A Hidden Credential Based Automated Trust Negotiation Model

Automated Trust Negotiation, for short ATN, is an approach to establishing trust relationship between strangers through iterative disclosure of digital credentials and access control policies. Hidden credential is based on ellipse curve cryptography and has a high secure level. When hidden credential is introduced to ATN, a hidden credential based ATN model, called HCBATN, is presented in this paper. The model uses hidden credential to carry and transfer participants' digital credentials, access control polices and resource/service, which can greatly protect sensitive credentials and policies as well as user's privacy. Meanwhile, due to hidden credential's inherent characteristic, the model has many features of one-round credential exchange, little network cost, little spending on storing and finding credentials, high secure integrality etc.