The growing diffusion of portable devices with wireless connectivity and the integration of telecommunication systems and the Internet enable users to benefit from anytime and anywhere impromptu collaboration. Security is crucial to ensure secure sharing of information, but calls for novel solutions capable of establishing trust relationships on-the-fly among previously unknown entities. Traditional trust solutions seem to be inappropriate in dynamic mobile environments. They typically rely on centralised trust certification authorities and assign to entities levels of trust that depend on static entity attributes, such as entity identity or role. However, entity identities/roles are often either not sufficiently informative or too limited to take adequate collaborative decisions. This paper presents a novel trust model that rules the assignment of trust to entities based on various dynamic context information, e.g., user/device location, device properties, user needs, local operating conditions. As key features, this model allows to determine, to associate and to adapt entity levels of trust depending on the contexts where users operate and users acquire/lose a level of trust when entering/leaving a specific context. The proposed model facilitates the update of trust relationships as relevant changes in context information occur. The paper also shows the implementation of the proposed model in the COMITY framework that provides support facilities for defining and enforcing context-based trust policies.
[1]
Antonio Corradi,et al.
AGAPE: a location-aware group membership middleware for pervasive computing environments
,
2003,
Proceedings of the Eighth IEEE Symposium on Computers and Communications. ISCC 2003.
[2]
Timothy W. Finin,et al.
Communications - Trust-Based Security in Pervasive Computing Environments
,
2001,
Computer.
[3]
Jon Howell,et al.
A Formal Semantics for SPKI
,
2000,
ESORICS.
[4]
Pietro Michiardi,et al.
Security in ad hoc networks
,
2003
.
[5]
Antonio Corradi,et al.
Context-based access control management in ubiquitous environments
,
2004,
Third IEEE International Symposium on Network Computing and Applications, 2004. (NCA 2004). Proceedings..
[6]
Jean Bacon,et al.
Trust for Ubiquitous, Transparent Collaboration
,
2004,
Wirel. Networks.
[7]
Stephen Hailes,et al.
Supporting trust in virtual communities
,
2000,
Proceedings of the 33rd Annual Hawaii International Conference on System Sciences.
[8]
Philip R. Zimmermann,et al.
The official PGP user's guide
,
1996
.