Dynamic security context management in Grid-based applications

Autor: Leon Gommans, Cees de Laat, Yuri Demchenko, Alfred Wan, Olle Mulmo
Přispěvatelé: System and Network Engineering (IVI, FNWI), IvI Research (FNWI), Faculty of Science, Computational Science Lab (IVI, FNWI), Theory of Computer Science (IVI, FNWI)
Jazyk: angličtina
Rok vydání: 2008
Předmět:
Zdroj: Future Generation Computer Systems, 24(5), 434-441. Elsevier
ISSN: 0167-739X
Popis: This paper summarises ongoing research and recent results on the development of flexible access control infrastructure for complex resource provisioning in Grid-based collaborative applications and on-demand network services provisioning. The paper analyses the general access control model for Grid-based applications and discusses what mechanisms can be used for expressing and handling dynamic domain or process/workflow-related security context. Suggestions are given on what specific functionality should be added to the Grid-oriented authorization frameworks to handle such dynamic security context. As an example, the paper explains how such functionality can be achieved in the GAAA Authorization framework (GAAA-AuthZ) and GAAA toolkit. Additionally, the paper describes AuthZ ticket format for extended AuthZ session management. The paper is based on experiences gained from major Grid-based and Grid-oriented projects such as EGEE, Phosphorus, NextGRID, and GigaPort Research on Network.
Databáze: OpenAIRE