信任协商在信息交换系统中的研究

随着电子政务的发展,跨域通信的需求越来越迫切,这种情况下为了保证安全需要陌生主体间能够建立信任连接,这在原有信息交换系统中是无法实现的.为此引入信任协商技术,它是一种在不同领域主体间建立信任连接的新技术,它通过信任证、访问控制策略的交互披露来自动建立信任关系.介绍了原有信息交换系统的缺陷、信任协商技术的基本概念,并对信任协商技术与信息交换系统的结合进行了研究,提出了一种可行的系统实现及其策略算法,从而满足在安全性和扩展性方面的要求.

Research of infomation interchange system by using trust negotiation technology

With the development of the electronic government, there are more and more transactions occur between partners in separate security domains. So these strangers must be able to establish trust without prior relationship, which is not possible in original information interchange systems. To resolve this problem, trust negotiation technology is used to establish trust across security domain boundaries, which establishes trust between strangers with iteratively disclosure of credentials and access control policies. The shortcomings and problems in original systems are analyzed, and the definition of trust negotiation is introduced, finally how to use the trust negotiation technology in information interchange systems to improve security and scalability is investigated.