Experiences from using a UML-based method for trust analysis in an industrial project on electronic procurement

This paper reports on experiences from using a UML-based method for trust analysis in an industrial project. The overall aim of the trust analysis method is to provide a sound basis for making trust policy decisions. The method makes use of UML sequence diagrams extended with constructs for probabilistic choice and subjective belief, as well as the capture of policy rules. The trust analysis method is evaluated with respect to a set of criteria. The industrial project focused on the modeling and analysis of a public electronic procurement (eProcurement) system The research on which this paper reports has been carried out within the DIGIT project (180052/S10), funded by the Research Council of Norway, and the MASTER project, funded from the European Community’s Seventh Framework Programme (FP7/2007-2013) under grant agreement FP7-216917. T.V. Håvaldsrud · O.S. Ligaarden ( ) · A. Refsdal · K. Stølen SINTEF ICT, Oslo, Norway e-mail: [email protected] T.V. Håvaldsrud e-mail: [email protected] A. Refsdal e-mail: [email protected] K. Stølen e-mail: [email protected] T.V. Håvaldsrud · O.S. Ligaarden · K. Stølen Department of Informatics, University of Oslo, Oslo, Norway P. Myrseth · J. Ølnes DNV Research and Innovation, Høvik, Norway P. Myrseth e-mail: [email protected] J. Ølnes e-mail: [email protected] T.V. Håvaldsrud et al. making use of a validation authority service for validating electronic certificates and signatures.