Enabling Usage Control Through Reputation Objects: A Discussion on e-Commerce and the Internet of Services Environments

Rehab Alnemr, Stefan G. Koenig, Torsten Eymann, Christoph Meinel

Journal of theoretical and applied electronic commerce research · 2010 · 27 citations · 31 references

DOIFull text

Open access

Concepts

TL;DR

Internet‑of‑Service and e‑Commerce environments view the Internet as a vast infrastructure for trading services or products, yet Internet‑of‑Service participation carries higher risks and existing security mechanisms fail to fully secure access and usage. The paper aims to clarify the meaning and role of trust and reputation in these environments and to show how they relate to security mechanisms, service‑level agreements, and quality metrics to enable usage control. It proposes a solution built on a prior reputation‑object model, introducing reputation auditing where quality processes are integrated into reputation management, and discusses how trust and reputation concepts support security, SLAs, and quality measurements.

Abstract

This paper discusses the meaning and the role of Trust and Reputation in Internet-of-Service and e-Commerce environments following a comparative case study. Both environments represent paradigms through which the Internet is seen as a huge infrastructure where electronic services or real products are traded on. In comparison to electronic commerce, participating in an Internet-of-Services can be full of risks for all participants. Even well known security mechanisms are not able to close all gaps of access and usage control. This paper discusses the concepts of trust and reputation and brings to light the relation between these concepts to security mechanisms, Service-Level-Agreements, and quality measurements in order to enable Usage Control. The proposed solution is based on our previous model of reputation objects. The discussion also introduces a new concept of what we call reputation auditing where quality processes are considered part of reputation management not the other way around.

References

31