Trust in a system is a belief in users that the system will behave and provide benefits to them as expected and that the system will not harm them or allow them to be harmed.
Trustworthiness is, literally, the property of being worthy of trust, i.e. a system is trustworthy if one can be sure it will not breach the trust placed in it.
As systems become more complex in 5G network, involving more interacting stakeholders, and potentially even changing dynamically in response to those stakeholders, it is increasingly difficult to determine their trustworthiness. Systems may have multiple trust zones that are adapted to suit the requirements for trustworthiness both from user and network operator point of view. The trust levels of the zones may range from open to zero trust (always verify) networks and the types of applicable security controls and load caused by them will vary significantly.
Relevance for 5G-ENSURE
5G-ENSURE will provide, through the different use cases, a new trust model which will address the multiplicity of actors and also consider the M2M interactions characterising the next generation networks. The trust model needs to address the different aspects of:
- mutual trust between automated systems, e.g. through advanced certificate and token based methods (M2Mt)
- mutual trust between human stakeholders holding responsibilities for different parts of 5G networks, between user and network operators and between users of the network (U2Ut)
- the level of trust that a human stakeholder has towards a system (U2M)