Abstract:In grid environments, the dynamic and multi-institutional nature introduces challenging security issues. In this paper, we propose subtask-based authorization service (SAS) architecture to fully secure a type of application oriented to engineering and scientific computing. We minimize privileges for task by decomposing the parallel task and re-allotting the privileges required for each subtask. Community authorization module describes and applies community policies of resource permission and privilege for resource usage or task management. It separates proxy credentials from identity credentials. We adopt a relevant policy and task management delegation to describe rules for task management. The ultimate privileges are formed by the combination of relevant proxy credential, subtask-level privilege certificate and community policy for this user, as well as they conform to resource policy. To enforce the architecture, we extend the RSL specification and the proxy certificate, modify Globus' gatekeeper, jobmanager and the GASS library to allow authorization callouts, and evaluate the user's job management requests and job's resource request in the context of policies.

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Design and implementation of a grid service security access platform based on GSI

Supporting secure collaborative computing in grid environments

Portal Access to Scientific Computation and Customized Collaborative Visualization on Campus Grid

Research of PKI Technology Based on Grid Security

A Pki-Based Scalable Security Infrastructure For Scalable Grid

Analysis on grid security patterns based on PKI

RESEARCH AND IMPLEMENTATION OF SIGN-ON SYSTEM FOR GRID PORTAL

The Design, Development and Application of a Proxy Credential Auditing Infrastructure for Collaborative Research

A Security System Using Multiple Certifications in Grid Environments

GridCertLib: A Single Sign-on Solution for Grid Web Applications and Portals

Improved Scheme on Proxy Certificate Chain Verification in Grid

Authentication and Authorization Infrastructure for Grids—issues, Technologies, Trends and Experiences

Efficient Certificateless Authentication and Key Agreement (CL-AK) for Grid Computing.

Design and Implementation of Service Grid Portal

A Security Architecture Using Group Authentication and Collaboration of Grid Computing

Secure Access To Grid Information Service Using Shibboleth And Permis

Identity-based Authentication Protocol for Grid

Security Scheme for Cross-Domain Grid: Integrating WS-Trust and Grid Security Mechanism

STUDY OF PMI AND PKI-BASED AUTHORIZATION SCHEMA IN GRID

An Authorization Model Based on SPKI Certificate in Grid