TACM: A Trust Negotiation Based Access Control Model to The Organization􀀂s CriticalData Using Passive Defense Approach

In broad cross-organization environments, establishing trust among distributed services, has become a basic need. Access control and provision of data security, are notable challenges in these environments. Due to different security policies in inter-organizational environment, traditional access control mechanisms are often unable to satisfy users security requirements. Trust negotiation is a crucial and promising approach in trust establishment and secure interactions between entities for which there is no pre-existing knowledge or experience. In this paper, a new access control model with passive defense approach based on trust negotiation mechanisms with XACML standard architecture to overcome aforementioned challenges is proposed. The model can overcome aforementioned challenges by obtaining necessary level of trust for users before processing their requests to access designated resources. Performance and flexibility of our model show that its applicability is more convenient for development of einteractions over the internet.