Trust-Serv: A Lightweight Trust Negotiation Service Halvard Skogsrud, Boualem Benatallah, Fabio Casati, and Manh Q. Dinh   View Paper (PDF)   Return to DEMO GROUP 4: WEB AND WEB-SERVICES Abstract Trust negotiation is an approach to access control that does not require the provider to know the requester a priori. Instead, trust is established on-the-fly in a negotiation. However, specifying and maintaining policies is hard in existing systems. The reason is usually that policy specification requires time-consuming and error-prone low-level programming. We present Trust-Serv, a model-driven trust negotiation system for Web services. Our system addresses the policy management problem by modeling trust negotiation policies as extended state machines. Trust-Serv has been implemented as a middleware that is transparent to the Web services and to the developers of Web services, simplifying Web service development and management as well as enabling scalable deployments. In our demo, we will demonstrate policy specification and management, as well as how trust negotiations are automated using our system. ©2005 Association for Computing Machinery