Trust Me, I'm a Machine
An EU computer science project hopes to make the uncertainty attached to the pervasive computing future a lot more secure through establishing trust.
(PRWEB) April 7, 2005 -- Using the cost-benefit function at the heart of risk
analysis, the IST programme-funded SECURE project developed software to
integrate the very subjective, human concept of trust into computers, PDAs,
mobile 'phones and other network devices.
Pervasive computing is a
steadily emerging reality. Mobile phones and PDAs are becoming powerful
computers in their own right, cars now routinely include telematics, which
allows them to know where they are, for example. Now vending machines that
accept payment from your mobile phone or PDA are in deployment. All of these
devices will periodically connect to the network to perform transactions,
whether it's information, services or purchases.
But as the network
spreads and the devices that can access it multipy it is very difficult to
maintain security. How do you know the person, or the machine, will not steal
your personal information or that they will supply the goods, services or
information you purchase?
"We've developed software that allows judgement
based on establishing a value of trust and balancing that against the risk of
abuse. We've mostly work on developing a system to stop spam, so the software
would ask establish if the email is trustworthy. We also looked at using the
service for an e-purse, an electronic purse for small transactions," says Vinny
Cahill, coordinator of the SECURE project at Trinity College, Dublin.
The
concept works like this: your PDA or mobile phone receives a query about your
current location. First it establishes the identity of the request. Then your
PDA or e-purse asks its trust calculator how trustworthy you are. The calculator
bases this on previous experiences. If this is the first time, it will base it
on your reputation or rating with others or, in the SECURE system, it can even
delegate authority to another party.
Meanwhile the risk evaluator is
calculating the cost of the transaction if your trust is abused. If the trust is
greater than the risk, you PDA reveals your location. If it is unsure, it asks
the user. This could be very helpful if you're near a store that's offering a
discount on something you need.
The group says their software scheme can
even work offline, the based on experience in similar situations.
SECURE
developed their software in Java, which means it can work on almost any
device.The project finished in December 2004, when it completed development of a
software framework that can incoporated to various applications.
"Trust
is emerging as a viable method for creating and using ad hoc networks and we'd
like to take it further, but it will be another two or three years before it
could be deployed in a commercial application," says Prof. Cahill.
Please
mention IST Results as the source of this story and, if publishing online,
please hyperlink to: http://istresults.cordis.lu/
Contact: Tara Morris,
+32-2-2861985, e-mail protected from spam bots
# # #
Source : http://www.prweb.com/releases/2005/4/prweb225599.htm