Trust models Sample Clauses

Trust models. IoT trust models shall be designed after the initial requirement and context analysis. They shall detail how trust is defined in a system (i.e. what is the point of view from which a subject should be evaluated), how should it be measured and how relationships with other subjects should be managed based on their trust evaluation. Generally, the system trust models apply to only a specific set of entities, pertaining to one organization and this set should be well defined during the later phases of architecture design as well as the software and infrastructure tools to evaluate the trustworthiness of other subjects. While describing all the trust models archetypes that could be used in the frame of IoT is out of the scope of this document, a list of mandatory aspects that need to be taken into account is provided: • The trust model domain defines the specific set of subjects to which a trust model applies. In the frame of IoT, this definition can be based on subscription or by the physical or network context/domain. • Trust evaluation mechanisms must be defined in order to define a coherent and safe method for calculating the degree of trustworthiness of a subject. Evaluation mechanisms should also define the point of view from which trust should be evaluated and which aspects should be deemed relevant. • The behaviour policies must define how subjects that use the model may interact with other subjects that can be evaluated using the same trust model. Different behaviours could be defined according to the trustworthiness of the latter. Though it is not recommended, a trust model could define specific behaviours for interacting with subjects that cannot be evaluated with that model. • The trust anchor is a subject trusted by default (possibly after authentication) and used in the evaluation of third parties’ trustworthiness by all the subjects that will use the same trust model. In the IoT environment this can be a service running on a node in the same peripheral network (e.g. the gateway), a centralized service deployed in the Internet or the node itself. • Federation of trust is essential in order to provide interoperability between subjects which use different trust models. In the IoT scenario where many trust models will coexist, federation will probably be a relevant phenomenon due to the very large amount of subjects of the IoT and, thus, trust models should also specify if and how trust relationships can be established among different systems. • M2M ...

Trust models. As already said in previous sections it is essential that all the companies involved in collaboration can trust each others, so a trusted collaboration network must be set up. In this section, the most common trust models are analysed. Once the security model for access control has been refined, in a further stage, the best strategy for establishing the circle of trust in ComVantage will be decided and implemented.