Automated trust negotiation models

For secure communication and access control in open networks mutual trust between entities is needed. Today´s trust mechanisms are based on identities, credential exchange and preregistration. In those models user is required to decide which credentials to submit and which credentials not to disclose. This represents a problem in evaluating the trustworthiness between entities who are complete strangers and produces numerous credential and personal information holding databases. One solution is an automated trust negotiation system which governs and controls credential exchange needed for trustworthy communications. Many models that bring improvements have been proposed, but they also raise additional security issues. This paper explains these models and their security issues.