Reaching Agreement in Security Policy Negotiation

Abstract

International audienceThe secure interaction between different applications and services requires negotiation of their security properties. This is typically defined as a security policy contract, which aims at coordinating diverse security policies of different actors. Although considerable attention has been attracted to this theme in the recent literature of e-contract and negotiation, there is not a complete framework to negotiate security policies. In this paper, we propose a framework and an algorithm to negotiate security policy. The paper shows mainly how an agreement could be reached between two negotiators with our negotiation model. Besides, it advances an approach to evaluate the relationship between security policies

Extend Web Service Security Negotiation Framework in Privacy

“…Li, et al [18] grabbed an attention that there is no framework to negotiate security policies. Through their paper, authors present only how an agreement can be reached between security policies.…”

Towards negotiable privacy policies in mobile healthcare

“…However, policies written in this language can be very complex, opaque, and difficult to understand [1]. Also, user preferences cannot be expressed in P3P [5].…”

“…Based on the bargaining model [20], a framework and algorithm for solving security policies conflicts were suggested in [1]. We get inspired by this solution to define an approach and algorithm to resolve the issue of conflicting privacy policies in mobile health environments using the concept of negotiation.…”

“…It should uniformly deal with both sides of disclosure of personal information namely user preferences and service policies, and enable satisfaction checking between the two [5]. For this purpose, we refer to the negotiation algorithm defined in [1]. It consists of four stages: Information stage, Demand stage, Bargaining stage and contract establishment stage [1] and five actions: propose, receive, creatAgreement, agreement and refuse [1].…”

“…The idea is inspired by the bargaining model [1,20] where two players negotiate how to share one dollar with their changeable attitude from flexible to stubborn [1]. The purpose of this stage is that one of the negotiator or both arrive to take a decision [1] (accept or refuse the negotiation offer).…”