TRIMS, a privacy-aware trust and reputation model for identity management systems

1389-1286/$ see front matter 2010 Elsevier B.V doi:10.1016/j.comnet.2010.07.020 ⇑ Corresponding author. Tel.: +34 868 88 78 66; fa E-mail addresses: [email protected] (F.G. Márm neclab.eu (J. Girao), [email protected] (G.M. Pérez). URLs: http://ants.dif.um.es/~felixgm (F.G. Mármo org/joao (J. Girao), http://webs.um.es/gregorio (G.M Electronic transactions are becoming more important everyday. Several tasks like buying goods, booking flights or hotel rooms, or paying for streaming a movie, for instance, can be carried out through the Internet. Nevertheless, they are still some drawbacks due to security threats while performing such operations. Trust and reputation management rises as a novel way of solving some of those problems. In this paper we present our work TRIMS (a privacy-aware trust and reputation model for identity management systems), which applies a trust and reputation model to guarantee an acceptable level of security when deciding if a different domain might be considered reliable when receiving certain sensitive user’s attributes. Specifically, we will address the problems which surfaces when a domain needs to decide whether to exchange some information with another possibly unknown domain to effectively provide a service to one of its users. This decision will be determined by the trust deposited in the targeting domain. As far as we know, our proposal is one of the first approaches dealing with trust and reputation management in a multidomain scenario. Finally, the performed experiments have demonstrated the robustness and accuracy of our model in a wide variety of scenarios. 2010 Elsevier B.V. All rights reserved.