Trust in Computer Systems and the Cloud. Mike Bursell

Чтение книги онлайн.

Читать онлайн книгу Trust in Computer Systems and the Cloud - Mike Bursell страница 17

Trust in Computer Systems and the Cloud - Mike Bursell

Скачать книгу

such trust relationships typically rely greatly on reciprocity; and given our focus on the asymmetry of trust relationships, we should be wary of relying overly on this approach.

      The reputation approach is interesting because rather than having to start her trust relationship to Alice from scratch or with only the tools that she has (her experience, biases, and some expectations), Carol starts with some specific information about Alice that she can use. We can think of this type of information as inputs to the idea of “trustworthiness” proposed by some of the writers we have mentioned when considering human-to-human trust.

      We know in our day-to-day human interactions that reputations can be ill-formed or unfairly earned and also that they can change significantly over time. We will look at indirect trust relationships in Chapter 3, “Trust Operations and Alternatives”, and at the importance of time in Chapter 7, “The Importance of Time”, but another point arises from reputations: over the many years that humans have grown into larger and larger groups, creating societies and forming organisations, reputations are important for another type of trust relationship. This is the area on which Schneier spends much attention, as evidenced by his chapter headings on organisations, corporations, and institutions, and which we can broadly label institutional trust.

      It has become clear, with the rise of blockchain-backed crypto-currencies as an alternative (for some) to traditional fiat currencies, that the types of assurance, and how they are managed, are more complex than had generally been assumed. This topic is so important for our understanding of how trust is embodied in a particular set of systems that we will return to crypto-currencies in more detail in Chapter 6, “Blockchain and Trust”.

      For now, we will concentrate on more traditional institutions and some of the discussions on how trust is relevant to them. It should come as no surprise that this is a topic that has garnered a great deal of attention over the years. The idea that institutions are required because individual humans cannot “scale” to provide all of the services required is clearly not new. Monarchs and generals have appeared to manage large groups of people, trustworthy individuals have been appointed to dispense justice (at, for instance, Jethro's urging to Moses in Exodus 18), and the people who they serve—or are supposed to serve—need to have a trust relationship to them.

      Theories of Institutional Trust

      If we ignore Hobbes's preference for a monarch as the structural centre and overlook for now the question of how exactly a central authority is established (a topic to which we will return in Chapter 3, “Trust Operations and Alternatives”) we may consider the possibility that trust in this central authority could be continually re-established, but we must remember that such trust is really made up of many separate trust relationships to the authority. There is a distinction here between the set of trust relationships held and the reputation of the authority: the latter, while theoretically a reflection of all the former, is not a true view of it in the context of two important measures:

       The conglomeration of information about trust relationships will always be imperfect in practice, in the same way that a map is never a true representation of a tract of land (a perfect representation becomes more than a representation and becomes part of what it is representing19).

       Reputation is information allowing an entity to consider the formation—or tuning—of a trust relationship rather than the relationship itself.

Скачать книгу