Trust management (information system)

Trust management is popular in implementing information security, specifically access control policies.

The concept of trust management has been introduced by Matt Blaze[1][2] to aid the automated verification of actions against security policies.

Trust management can be seen as a symbol-based automation of social decisions related to trust,[3] where social agents instruct their technical representations how to act while meeting technical representations of other agents.

Further automation of this process can lead to automated trust negotiations (e.g. see Winslett[4]) where technical devices negotiate trust by selectively disclosing credential, according to rules defined by social agents that they represent.

It is also possible to let technical agents monitor each other's behaviour and respond accordingly by increasing or decreasing trust.