METHOD AND SYSTEM FOR TRUST MANAGEMENT IN DISTRIBUTED COMPUTING SYSTEMS

• US 20140317687A1
• Filed: 12/07/2011
• Published: 10/23/2014
• Est. Priority Date: 01/13/2011
• Status: Abandoned Application

• Current Assignee: TATA Consultancy Services Limited (Tata Sons Pvt Ltd.)
• Original Assignee: TATA Consultancy Services Limited (Tata Sons Pvt Ltd.)
• Inventors: Ukil, Arijit
• Application Number:
  US13/979,613
• Publication Number:
  US 20140317687A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and system for determining trustworthiness of individual nodes in distributed computing systems by considering the various malicious behaviors of the individual nodes as trustworthiness parameters. The invention provides a method and system that explores the behavioral pattern of the malicious nodes and quantifies those patterns to realize the secure trust management modeling. The invention also provides a method and system to distinguish between malicious node, defective node and accuser node.

Claims

1. A method for determining trustworthiness of a node in a distributed computing system, comprising:

forwarding at least one data packet from a first node to a second node;

monitoring a next-hop delivery of the at least one data packet by the second node;

computing, via a processor, a forwarding index for the second node using the monitoring of the next-hop delivery;

determining a confidence level for the second node using the forwarding index for the second node; and

forwarding at least another data packet from the first node based on the confidence level for the second node.

2. A method as claimed in claim 1, wherein the forwarding at least another data packet from the first node based on the confidence level for the second node includes forwarding the at least another data packet to a node other than the second node.

3. A method as claimed in claim 1, further comprising:

broadcasting the confidence level for the second node to one or more neighboring nodes of the first node.

4. A method as claimed in claim 1, further comprising:

receiving a broadcast of another confidence level for the second node from one or more neighboring nodes of the first node.

5. A method as claimed in claim 4, further comprising:

dynamically updating the confidence level for second node after receiving the broadcast of the another confidence level for the second node from the one or more neighboring nodes of the first node.

6. A method as claimed in claim 5, wherein the first node stores the dynamically updated confidence level for the second node in a scalar matrix.

7. A method as claimed in claim 6, wherein the scalar matrix of the first node comprises the confidence level for the second node as a number greater than or equal to zero and less than or equal to one.

8. A method as claimed in claim 1, further comprising:

classifying individual nodes in the distributed computing system into at least two categories selected from the croup consisting of;

malicious nodes, defective nodes, and accuser nodes.

10. A method as claimed in claim 1, wherein the distributed computing system is a wireless sensor network.

23. A method as claimed in claim 1, further comprising:

observing a forwarding trend of the second node; and

updating the confidence level for the second node for determining a long-term trustworthiness of the second node.

24. A method as claimed in claim 23, wherein the long-term trustworthiness for the second node is an average of confidence levels for the second node.

25. A method as claimed in claim 23, wherein the long-term trustworthiness determination is applied to each node in the distributed computing system.

27. The system as claimed in claim 25, wherein the long-term trustworthiness for the second node is an average of confidence levels for the second node.

9. (canceled)

11. (canceled)

12. A system for determining trustworthiness of a node in a distributed computing system, the system comprising:

a processor; and

a memory disposed in communication with the processor and storing processor-executable instructions, the instructions comprising instructions for;

forwarding at least one data packet from a first node to a second node;

monitoring a next-hop delivery of the at least one data packet by the second node;

computing a forwarding index for the second node using the monitoring of the next-hop delivery;

determining a confidence level for the second node using the forwarding index for the second node; and

forwarding at least another data packet from the first node based on the confidence level for the second node.

13. A system as claimed in claim 12, wherein forwarding the at least another data packet from the first node based on the confidence level for the second node includes forwarding the at least another data packet to a node other than the second node.

14. A system as claimed in claim 12, the instructions further comprising instructions for:

broadcasting the confidence level for the second node to one or more neighboring nodes of the first node.

15. A system as claimed in claim 12, the instructions further comprising instructions for:

receiving a broadcast of another confidence level for the second node from one or more neighboring nodes of the first node.

16. A system as claimed in claim 15, the instructions further comprising instructions for:

dynamically updating the confidence level for the second node after receiving the broadcast of the confidence level of the second node from the one or more neighboring nodes of the first node.

17. A system as claimed in claim 16, wherein the first node stores the dynamically updated confidence level for the second node in a scalar matrix.

18. A system as claimed in claim 17, wherein the scalar matrix of the first node comprises the confidence level for the second node as a number greater than or equal to zero and less than or equal to one.

19. A system as claimed in claim 12, the instructions further comprising instructions for:

classifying individual nodes in the distributed computing system into at least two categories selected from the group consisting of;

malicious nodes, defective nodes and accuser nodes.

21. A system as claimed in claim 12, wherein the distributed computing system is a wireless sensor network.

26. The system as claimed in claim 13, the instructions further comprising instructions for:

observing a forwarding trend of the second node; and

updating the confidence level for the second node for determining a long-term trustworthiness of the second node.

28. A system as claimed in claim 26, wherein the long-term trustworthiness determination is applied to each node in the distributed computing system.

20. (canceled)

22. (canceled)