A security framework for open service mobility using trust delegation

We consider security and trust issues in providing a fully open environment for global-scale roaming and mobility of commercial services across different mobile network domains. A delegation-based dynamic trust framework is proposed as a solution. For scalable online service provisioning and business transactions, we suggest that service providers and consumers delegate selected tasks of security and trust management to trusted business partners who already have established reputations in the market. Then, we endorse dynamic, on-demand establishment of trust relationships amongst the delegates for broad availability of services across business boundaries. In order to address security concerns of service providers and consumers, security functions for trust, credibility, credential, and accountability management are incorporated into the framework. Finally, we show how the framework can be applied to 3G network environments.