A Novelty Approach for Checking Consistency of Security Policy

Trust negotiation (TN) is an approach to establishing trust relationship between strangers by disclosing iteratively credentials and access control policies. In open and distributed environment, while TN brings convenience in resource sharing, it still has some shortcomings, such as easy to fail in negotiation, difficult to track users' deed and so on. In ATN, access control policy plays a key role in protecting resources from unauthorized access. In practice, a policy may contain sensitive information, and its disclosure may cause damages. In order to protect the sensitive policy or its content, the policy is usually designed complex. Even worse, the policy may be self contradictory, which would lead the negotiation to fail. To solve such a problem, a new approach for checking policy consistency is proposed in the paper. In the approach, we analyze why the policy inconsistency happens and specify how to avoid it by simplifying a compound policy. Meanwhile, the approach is proved useful to hide policy by presenting some useful theorems to generate minimal policy set and credential set.