{"title":"Trust Scheme Interoperability: Connecting Heterogeneous Trust Schemes","authors":"Stefan More","doi":"10.1145/3600160.3605046","DOIUrl":null,"url":null,"abstract":"The growing interconnectedness of computer systems has led to the need for a flexible approach to trust management. Many countries operate trust schemes to enable the automated assessment of the trustworthiness of information. But this assessment remains a challenge if the information was issued in a foreign trust scheme. An issue is the lack of a root of trust shared between the trust schemes. Other challenges are the heterogeneity of trust models used by entities operating in different legal and cultural environments. In this paper, we present a novel approach to facilitate the interoperability between different trust schemes. In our approach, trust scheme operators take legal agreements that exist between two countries and publish them as a machine-readable trust recognition. Additionally, a scheme operator codifies the rules for trust recognition of the other scheme in the form of a trust translation. Using this information, a trust verifier maps trust data from the other scheme into its own scheme. This allows a verifier to automatically process transactions from other trust schemes in a trustworthy way.","PeriodicalId":107145,"journal":{"name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2023-08-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the 18th International Conference on Availability, Reliability and Security","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/3600160.3605046","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
The growing interconnectedness of computer systems has led to the need for a flexible approach to trust management. Many countries operate trust schemes to enable the automated assessment of the trustworthiness of information. But this assessment remains a challenge if the information was issued in a foreign trust scheme. An issue is the lack of a root of trust shared between the trust schemes. Other challenges are the heterogeneity of trust models used by entities operating in different legal and cultural environments. In this paper, we present a novel approach to facilitate the interoperability between different trust schemes. In our approach, trust scheme operators take legal agreements that exist between two countries and publish them as a machine-readable trust recognition. Additionally, a scheme operator codifies the rules for trust recognition of the other scheme in the form of a trust translation. Using this information, a trust verifier maps trust data from the other scheme into its own scheme. This allows a verifier to automatically process transactions from other trust schemes in a trustworthy way.