Reputation Service and Reputation Based Access Control

A reputation service is an essential part of a reputation system, which collects, distributes, and aggregates feedback about service providers' past behaviour. The feedback, as a score, is given interactively or by a user or is derived from a monitoring process automatically. The reputation service accommodates for each service provider an accumulated score as its reputation, which is produced by following a reputation algorithm. Once the reputation of an entity on Internet is built, it can then be used for the information security purposes, such as stopping the user with bad reputation having access to a resource of networks, or not allowing the service with bad reputation to access other trustworthy resources. This paper presents a reputation service, which is built as an independent web service and can be remotely invoked. It also addresses how the reputation of an entity can be used for access control purposes.