移动商务环境中基于交易票据的自动信任协商协议

Automated Trust Negotiation Protocol Based on Transactional Receipt in Mobile Commerce Environment

针对移动商务环境下使用现有信任协商方案存在的计算开销大的问题,提出一种基于交易票据的自动信任协商协议。首先,协商双方依据交易票据评估对方的信任度,然后根据信任度动态地调整访问控制策略来进行协商,最后双方交换信任证,协商双方根据交易票据和验证权证减少信任证验证次数,从而完成协商过程。经证明,基于交易票据的自动信任协商协议能够有效减少计算开销。

It is difficult to use trust negotiation in the mobile environment since existing trust negotiation mechanisms have large computational overhead. To address this problem, a transaction receipt-based mobile trust negotiation proto- col was proposed. Firstly,both sides of the negotiation evaluate each other＇s trust degree based on the transaction re-ceipt. Secondly, they dynamicly adjust the access control policy on the basis of the evaluated trust degree. Finally, they enter into the digital certificate exchanging process, in which the number of certificate authentication is reduced by ta- king advantages of transaction receipt and authentication ticket. The experiments show that this protocol can effectively reduce computational overhead.