Multi-domain Trust Management in variable-threat environments using rollback-access

Trust management systems are trust infrastructures that support authorization for security-critical actions in decentralized environments. In this paper we describe an extension suitable for multi-domain applications in variable-threat environments that allows for temporary adjustments of trust levels in response to elevated threat levels, and which can be reversed without compromising actions that took place during such periods-we term this, rollback-access. We argue that a rollback-access capability is an essential feature for security-critical applications, and propose a working prototype for an agent based implementation.