Protecting sensitive attributes in automated trust negotiation

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue WORKSHOP, 2002, Pages 41-51

  Winsborough, William H ^a   Li, Ninghui ^b  

^a Network Associates Laboratories   (United States)

^b Stanford University   (United States)

Author keywords

Attribute based access control; Digital credentials; Trust management; Trust negotiation

Indexed keywords

DATA PRIVACY; ELECTRONIC COMMERCE; ONLINE SYSTEMS; PUBLIC POLICY;

AUTOMATED TRUST NEGOTIATION (ATN);

SECURITY OF DATA;

EID: 0038041232     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/644527.644532     Document Type: Conference Paper

References (13)

1. Dwaine Clarke, Jean-Emile Elien, Carl Ellison, Matt Predette, Alexander Morcos, and Ronald L. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
2. Lorrie Cranor, Marc Langheinrich. Massimo Marchiori, Martin Presler-Marshall, and Joseph Reagle. The platform for privacy preferences 1.0 (P3P1.0). World Wide Web Consortium Recommendation. April 2002.
3. Carl Ellison, Bill Frantz, Butler Lampson, Ron Rivest, Brian Thomas, and Tatu Ylonen. SPKI certificate theory. IETF RFC 2693, September 1999.
4. Ninghui Li, John C. Mitchell, and William H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May 2002.
5. Ninghui Li, William H. Winsborough, and John C. Mitchell. Distributed credential chain discovery in trust management. To appear in Journal of Computer Security. Extended abstract appeared in Proceedings of the Eighth ACM Conference on Computer and Communications Security, 2001.
6. Gopalan Nadathur. A proof procedure for the logic of hereditary harrop formulas. Journal of Automated Reasoning, 11:115-145, 1993.
7. Kent E. Seamons, Marianne Winslett, and Ting Yu. Limiting the disclosure of access control policies during automated trust negotiation. In Proceedings of the Symposium on Network and Distributed System Security (NDSS'01), February 2001.
8. Kent E. Seamons, Marianne Winslett, Ting Yu, Lina Yu, and Ryan Jarvis. Protecting privacy during on-line trust negotiation. In 2nd Workshop on Privacy Enhancing Technologies. Springer-Verlag, April 2002.
9. William H. Winsborough and Ninghui Li. Towards practical automated trust negotiation. In Proceedings of the Third International Workshop on Policies for Distributed Systems and Networks (Policy 2002), pages 92-103. IEEE Computer Society Press, June 2002.
10. William H. Winsborough, Kent E. Seamons, and Vicki E. Jones. Automated trust negotiation. In DARPA Information Survivability Conference and Exposition, volume I, pages 88-102. IEEE Press, January 2000.
11. Ting Yu, Xiaosong Ma, and Marianne Winslett. Prunes: An efficient and complete strategy for trust negotiation over the internet. In Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-7), pages 210-219, November 2000.
12. Ting Yu, Marianne Winslett, and Kent E. Seamons. Interoperable strategies in automated trust negotiation. In Proceedings of the 8th ACM Conference on Computer and Communications Security (CCS-8), pages 146-155. ACM Press, November 2001.
13. Ting Yu, Marianne Winslett, and Kent E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Transactions on Information and System Security (TISSEC), 6(1). February 2003. To appear.