caa a22 4500 445852135 CHVBK 20180317145416.0 cr unu---uuuuu 170323e20110101xx s 000 0 eng 10.1007/s11227-009-0358-6 doi (NATIONALLICENCE)springer-10.1007/s11227-009-0358-6 Building Automated Trust Negotiation architecture invirtual computing environment [Elektronische Daten] [Deqing Zou, Shangxin Du, Weide Zheng, Hai Jin] Automated Trust Negotiation (ATN) is an important method to establish trust relationship between two strangers by exchanging their access control policies and credentials. Unfortunately, ATN is not widely adopted because of the complexity and multiformity of negotiation policies, especially in virtual computing environment, where the situation becomes worse than in traditional computing environment, due to the fact that a host with multiple virtual machines needs to be deployed with multiple negotiation policies. Moreover, all of these policies for each virtual machine must be upgraded and checked. To ease the burden on the administrator when deploying ATN access control policies and credentials in virtual computing environment, we propose an automated trusted negotiation architecture called virtual automated trust negotiation (VATN) to centralize ATN policies and credentials for multiple virtual machines in a physical node into a privileged virtual machine. VATN puts policy compliance checker and credential verification control in each virtual machine to improve the execution efficiency of trust negotiation. We implement VATN in Xen virtualization platform. Finally, we discuss the correctness of policy consistency checking and make performance analysis of VATN implemented in Xen. Springer Science+Business Media, LLC, 2009 Automated Trust Negotiation nationallicence Xen hypervisor nationallicence Virtualization nationallicence Policy consistency nationallicence Zou Deqing Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut Du Shangxin Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut Zheng Weide Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut Jin Hai Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut The Journal of Supercomputing Springer US; http://www.springer-ny.com 55/1(2011-01-01), 69-85 0920-8542 55:1<69 2011 55 11227 https://doi.org/10.1007/s11227-009-0358-6 text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s11227-009-0358-6 text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Zou Deqing Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut NATIONALLICENCE 700 1- Du Shangxin Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut NATIONALLICENCE 700 1- Zheng Weide Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut NATIONALLICENCE 700 1- Jin Hai Services Computing Technology and System Lab, Cluster and Grid Computing Lab, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China aut NATIONALLICENCE 773 0- The Journal of Supercomputing Springer US; http://www.springer-ny.com 55/1(2011-01-01), 69-85 0920-8542 55:1<69 2011 55 11227 Metadata rights reserved Springer special CC-BY-NC licence nationallicence BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer