Automated trust negotiation is a new approach to establishing trust between strangers through the disclosure of digital credentials.  Since credentials may be sensitive, access control policies can be used to control the disclosure of the credentials themselves.  There are a number of open research problems in this area, including secure protocol design, privacy, and usability.

The Internet Security Research Lab at BYU is a leader in this new research area.  In this talk, I will highlight the recent research that BYU students are conducting, including a radical new approach to trust negotiation known as hidden credentials that provides stronger privacy guarantees than prior approaches to trust negotiation.