Remembrance of Local Information Status for Enforcing Robustness of Policy-Exchanged Strategies for Trust Negotiation

Trust Negotiation, as a complex access control approach, can enable two unknown entities to establish a bilateral trust relationship. The complexity of Trust Negotiation may be ascribed to its support for the use of different strategies. Currently, a variety of strategies have been designed for Trust Negotiation, and the majority can support the exchange of authorisation policies during the conduction of Trust Negotiation. However, innate vulnerability issues still exist within these strategies including (1) there is no approach for automatic detection of Policy Cyclic Dependencies and (2) there is no approach for defending against Repetitive Credential Request Attacks. This paper proposes a solution design based on the idea of the remembrance of local information status aiming to address the two vulnerability.