Re: [soa-rm-ra] revised trust, risk, and willingness

[Francis McCabe <fmccabe@gmail.com>]

Some comments...

 1. The diagram should say that an actor participates in a joint action. You cant participate in an action; you perform one.

 2. The definition of willingness is somewhat circular.

Wikipedia uses this definition:

Willingness: the state of being willing.

Willing: Ready to do something that is not (can't be expected as) a matter of course.

Ready: Prepared for immediate action or use

However, I think that we mean something slightly different:

Willingness: an internal commitment to participate in a joint action.

There is another point that I think is important for SOA:

There is a presumption of willingness based on participation in joint actions. The fact that an actor participates in a joint action may be taken as evidence that the actor was willing to do so. I.e., we do not try to model coercion in our model of willingness. This evidence of willingness ultimately becomes the foundation for non-repudiation: evidence of participation is evidence of willingness, which in turn is evidence for non-repudiation.

 3. The Trust and Willingness diagram draws a trust relationship between actors. I think that they are both inherently ternary relations: trust about some action/outcome. I think that actors assess the evidence to determine their stance to risk and trust.

 We have tended to focus Real World Effect on the effects of service actions: I ask you to do something. But reputation may necessarily have a much broader basis (hearsay, government intervention, etc.)

 4. I do not think that we need to go into chains of trust. For the same reason that we don't do much of service composition.

 5. Consequences of Assessing Trust and Risk repeats earlier stuff.

 6. Trust and SOA: cut down and move to the beginning.

On Aug 18, 2009, at 8:25 PM, Ken Laskey wrote:

Per the action I took two weeks ago, attached is a revised draft for trust, risk, and willingness.  It is based on the previous text that I had scrubbed for RA comments and some discussions since then.  This incorporates the latest diagrams and a few choice lines turned into definitions.  I also did a little reorganizing and editing.  I kept examples that I think are useful, but we can sacrifice some of these if shortening is required.

Even if not perfect, I hope this is sufficient to proceed with PR2.

Ken

<trust revised.doc>

-----------------------------------------------------------------------------
Ken Laskey
MITRE Corporation, M/S H305      phone: 703-983-7934
7515 Colshire Drive                         fax:       703-983-1379
McLean VA 22102-7508






---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php