• DocumentCode
    1566679
  • Title

    Negotiation of Usage Control Policies - Simply the Best?

  • Author

    Pretschner, Alexander ; Walter, Thomas

  • Author_Institution
    Inf. Security, ETH Zurich, Zurich
  • fYear
    2008
  • Firstpage
    1135
  • Lastpage
    1136
  • Abstract
    The term "negotiation" suggests that multi-step bidirectional communication takes place. In this position paper, we play the devil\´s advocate and argue that (automated) policy negotiation essentially is one of the following, at least in the area of usage control. It can come down to a three-phase protocol that consists of a client request, a set of offers by the server, and the client\´s choice of an offer or to abort. Policy negotiation can also consist of a client request together with acceptable conditions plus the server\´s choice of one condition or to abort. In other words, negotiation of policies is a mere choice among alternatives; there is no negotiation in the intuitive sense of the word. - The goal of this position paper is to stimulate the discussion on what (automated) "policy negotiation" really is or can be.
  • Keywords
    authorisation; client-server systems; protocols; multistep bidirectional communication; three-phase protocol; usage control policy negotiation; Automatic control; Availability; Bidirectional control; Communication system control; Dictionaries; Displays; Electronic commerce; Humans; Information security; Protocols; agents; negotiation; usage control;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Availability, Reliability and Security, 2008. ARES 08. Third International Conference on
  • Conference_Location
    Barcelona
  • Print_ISBN
    978-0-7695-3102-1
  • Type

    conf

  • DOI
    10.1109/ARES.2008.163
  • Filename
    4529471