CERIAS Weekly Security Seminar – Purdue University
Trust negotiation is an emerging approach for establishing trust in open systems, where sensitive interactions may often occur between entities with no prior knowledge of each other. Although several proposals today exist of systems for the management of trust negotiation, none of them provides a comprehensive approach to the problem of privacy preservation. Trust negotiation systems, however, by their very nature may represent a threat to privacy. Credentials, exchanged during negotiations, often contain sensitive personal information that thus needs to be selectively released. As we believe that trust negotiation systems must effectively address privacy issues to be widely acceptable, we have investigated privacy in the context of trust negotiations. In this talk, we will propose the main results obtained so far in the area of trust negotiation as part of the Ph.D. activity. We propose a set of privacy preserving features to be included in any trust negotiation system, such as the support for the P3P standard, as well as a number of innovative features such as a novel format to encode digital credentials specifically designed for preserving privacy. Finally, we illustrate techniques for supporting anonymous trust negotiations as part of a privacy-preserving trust negotiations, to carry on trust negotiations without revealing identity related information. About the speaker: Anna Cinzia Squicciarini is a PhD Student at the University of Milan, Italy. She received a degree in Computer Science from the University of Milan in July 2002 with full marks. During autumn 2003 Anna Cinzia has been a visiting researcher at Swedish Institute of Computer Science, Stockholm. During spring 2004 she also been research scholar at Colorado State University, Fort Collins (CO), US. Her main research interests include trust negotiations, privacy, models and mechanisms for privilege and contract management in virtual organizations. Currently, she is visiting scholar at Purdue University, West Lafayette, where she is exploring research issues related with identity management and web service access control models.
En liten tjänst av I'm With Friends. Finns även på engelska.