A hybrid trust model for authorisation using trusted platforms

Aarthi Krishna; Vijay Varadharajan

doi:10.1109/TrustCom.2011.39

A hybrid trust model for authorisation using trusted platforms

Aarthi Krishna^*, Vijay Varadharajan

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

5 Citations (Scopus)

Abstract

Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a hybrid trust model that provides techniques for authorisation taking into account state of user platforms leveraging trusted computing technology. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the model and then provide a description of the proposed hybrid model.

Original language	English
Title of host publication	TrustCom 2011
Subtitle of host publication	2011 international joint conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-11: 16-18 November 2011, Changsha, Hunan, P. R. China
Editors	Guojun Wang, Stephen R. Tate, Jian-Jia Chen, Kouichi Sakurai
Place of Publication	Los Alamitos, Calif
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	288-295
Number of pages	8
ISBN (Print)	9780769546001
DOIs	https://doi.org/10.1109/TrustCom.2011.39
Publication status	Published - 2011
Event	10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2011), 8th IEEE International Conference on Embedded Software and Systems (ICESS 2011), 6th International Conference on Frontier of Computer Science and Technology (FCST 2011) - Changsha, China Duration: 16 Nov 2011 → 18 Nov 2011

Other

Other	10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2011), 8th IEEE International Conference on Embedded Software and Systems (ICESS 2011), 6th International Conference on Frontier of Computer Science and Technology (FCST 2011)
Country/Territory	China
City	Changsha
Period	16/11/11 → 18/11/11

Access to Document

10.1109/TrustCom.2011.39

Cite this

Krishna, A., & Varadharajan, V. (2011). A hybrid trust model for authorisation using trusted platforms. In G. Wang, S. R. Tate, J.-J. Chen, & K. Sakurai (Eds.), TrustCom 2011: 2011 international joint conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-11: 16-18 November 2011, Changsha, Hunan, P. R. China (pp. 288-295). Article 6120831 Institute of Electrical and Electronics Engineers (IEEE). https://doi.org/10.1109/TrustCom.2011.39

Krishna, Aarthi ; Varadharajan, Vijay. / A hybrid trust model for authorisation using trusted platforms. TrustCom 2011: 2011 international joint conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-11: 16-18 November 2011, Changsha, Hunan, P. R. China. editor / Guojun Wang ; Stephen R. Tate ; Jian-Jia Chen ; Kouichi Sakurai. Los Alamitos, Calif : Institute of Electrical and Electronics Engineers (IEEE), 2011. pp. 288-295

@inproceedings{3aa65414337b45d9b442b0b705d9969c,

title = "A hybrid trust model for authorisation using trusted platforms",

abstract = "Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a hybrid trust model that provides techniques for authorisation taking into account state of user platforms leveraging trusted computing technology. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the model and then provide a description of the proposed hybrid model.",

author = "Aarthi Krishna and Vijay Varadharajan",

year = "2011",

doi = "10.1109/TrustCom.2011.39",

language = "English",

isbn = "9780769546001",

pages = "288--295",

editor = "Guojun Wang and Tate, {Stephen R.} and Jian-Jia Chen and Kouichi Sakurai",

booktitle = "TrustCom 2011",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

note = "10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2011), 8th IEEE International Conference on Embedded Software and Systems (ICESS 2011), 6th International Conference on Frontier of Computer Science and Technology (FCST 2011) ; Conference date: 16-11-2011 Through 18-11-2011",

}

Krishna, A & Varadharajan, V 2011, A hybrid trust model for authorisation using trusted platforms. in G Wang, SR Tate, J-J Chen & K Sakurai (eds), TrustCom 2011: 2011 international joint conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-11: 16-18 November 2011, Changsha, Hunan, P. R. China., 6120831, Institute of Electrical and Electronics Engineers (IEEE), Los Alamitos, Calif, pp. 288-295, 10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2011), 8th IEEE International Conference on Embedded Software and Systems (ICESS 2011), 6th International Conference on Frontier of Computer Science and Technology (FCST 2011), Changsha, China, 16/11/11. https://doi.org/10.1109/TrustCom.2011.39

A hybrid trust model for authorisation using trusted platforms. / Krishna, Aarthi; Varadharajan, Vijay.
TrustCom 2011: 2011 international joint conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-11: 16-18 November 2011, Changsha, Hunan, P. R. China. ed. / Guojun Wang; Stephen R. Tate; Jian-Jia Chen; Kouichi Sakurai. Los Alamitos, Calif: Institute of Electrical and Electronics Engineers (IEEE), 2011. p. 288-295 6120831.

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

TY - GEN

T1 - A hybrid trust model for authorisation using trusted platforms

AU - Krishna, Aarthi

AU - Varadharajan, Vijay

PY - 2011

Y1 - 2011

N2 - Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a hybrid trust model that provides techniques for authorisation taking into account state of user platforms leveraging trusted computing technology. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the model and then provide a description of the proposed hybrid model.

AB - Authorisation systems play a vital role in protecting access to resources in distributed systems. Traditionally, authorisation is performed at the user level to determine whether a user has the necessary privileges to access a requested resource. However, when it comes to the user's platform, it is often assumed that the system hosting the user and the software running on it are 'trusted' and that it will behave correctly. In this paper, we propose a hybrid trust model that provides techniques for authorisation taking into account state of user platforms leveraging trusted computing technology. The model encompasses the notions of 'hard' and 'soft' trust to determine whether a platform can be trusted for authorisation. We first explain the rationale for the model and then provide a description of the proposed hybrid model.

UR - http://www.scopus.com/inward/record.url?scp=84856185721&partnerID=8YFLogxK

U2 - 10.1109/TrustCom.2011.39

DO - 10.1109/TrustCom.2011.39

M3 - Conference proceeding contribution

AN - SCOPUS:84856185721

SN - 9780769546001

SP - 288

EP - 295

BT - TrustCom 2011

A2 - Wang, Guojun

A2 - Tate, Stephen R.

A2 - Chen, Jian-Jia

A2 - Sakurai, Kouichi

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Los Alamitos, Calif

T2 - 10th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2011), 8th IEEE International Conference on Embedded Software and Systems (ICESS 2011), 6th International Conference on Frontier of Computer Science and Technology (FCST 2011)

Y2 - 16 November 2011 through 18 November 2011

ER -

Krishna A, Varadharajan V. A hybrid trust model for authorisation using trusted platforms. In Wang G, Tate SR, Chen JJ, Sakurai K, editors, TrustCom 2011: 2011 international joint conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-11: 16-18 November 2011, Changsha, Hunan, P. R. China. Los Alamitos, Calif: Institute of Electrical and Electronics Engineers (IEEE). 2011. p. 288-295. 6120831 doi: 10.1109/TrustCom.2011.39

A hybrid trust model for authorisation using trusted platforms

Abstract

Other

Access to Document

Other files and links

Fingerprint

Cite this