A generic decentralized trust management framework
Article first published online: 18 SEP 2013
Copyright © 2013 John Wiley & Sons, Ltd.
Software: Practice and Experience
Volume 45, Issue 4, pages 435–454, April 2015
How to Cite
2015), A generic decentralized trust management framework, Softw. Pract. Exper., 45, 435–454, doi: 10.1002/spe.2226, and (
- Issue published online: 5 MAR 2015
- Article first published online: 18 SEP 2013
- Manuscript Accepted: 9 AUG 2013
- Manuscript Revised: 8 AUG 2013
- Manuscript Received: 22 NOV 2012
- distributed systems;
- trust management;
This paper describes TRUSTPACK, a decentralized trust management framework that provides trust management as a generic service. TRUSTPACK is unique in that it does not provide a central service. Instead, it is run by many autonomous services. This design enables TRUSTPACK to alleviate privacy concerns, as well as potentially provide better personalization and scalability when compared with current centralized solutions. A major component of TRUSTPACK is a generic decentralized graph query processing framework called GRAPHPACK, which was also developed as part of this work. GRAPHPACK consists of a decentralized graph processing language as well as an execution engine, as elaborated in this paper. The paper also presents several examples and a case study showing how TRUSTPACK can be used to handle various trust management scenarios, as well as its incorporation in an existing third party P2P file sharing application. Prototypes of TRUSTPACK and GRAPHPACK are available as open source projects at http://code.google.com/p/trustpack/ and http://code.google.com/p/graphpack/, respectively. Copyright © 2013 John Wiley & Sons, Ltd.