Abstract:With the rapid development of the global information infrastructure, the use of virtual organization (VO) is gaining increasing importance as a model for building large-scale business information systems. The notion of VO is significant in that it could serve as a basic framework for implementing geographically distributed, cross-organizational application systems in a highly flexible manner. VO is generally composed of participants from different organizations driven by specific tasks. In order to control both participation and access to shared resources, authorization is essential in VO. However, authorization in VO is challenging because of the dynamic and distributed nature of VO, thus requiring mechanisms that axe efficient, scalable and being able to handle complex access control policies. This paper analyzes the requirement of authorization services for VO and proposes the use of threshold scheme as a basic mechanism for implementing authorization services in large scale distributed computing systems. While pointing out the desirable features of threshold schemes for complex authorization policies, the paper also discusses the practical limitations of threshold schemes in such an environment. The main contribution of this paper is that it suggests a practical approach for deploying threshold closure, an optimal form of threshold schemes, for implementing authorization of VO. In essence, we suggest segregating the policy and mechanism aspects of threshold closure so that complex policies may be specified using threshold closure which are implemented conveniently using existing authentication-based enforcement mechanisms available in traditional security infrastructure.

Implementation Issues of Authorization Mechanisms in Grid Computing Systems

Authorization Mechanisms for Virtual Organization in Grid Computing Systems

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

Supporting secure collaborative computing in grid environments

Authorization Mechanisms For Virtual Organizations In Distributed Computing Systems

Research on Multi-level Authorization Mechanism for Virtual Organization in Grid Computing System

A New Trust Framework for Resource-Sharing in the Grid Environment

Research of Community-based Multi-Grained Authorization in Service Grid

Design and implementation of a grid service security access platform based on GSI

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Semantic-Aware Access Control for Grid Application

Instance-oriented Delegation: A Solution for Providing Security to Grid-based Mobile Agent Middleware

Ensuring secure and robust grid applications – from a formal method point of view

An Instance-Oriented Security Mechanism in Grid-Based Mobile Agent System

Flexible Authorization with Decentralized Access Control Model for Grid Computing

Distributed Authorization and Authentication Framework for a Grid Infrastructure

Intelligent Agent-Based Scheduling Mechanism for Grid Service

A Public Grid Computing Framework Based on a Hierarchical Combination of Middleware

An Agent-Enabled Content-Explicit Authorization Model For Ogsa-Compliant Grid

Xml Based X.509 Authorization In Cernet Grid

A Pki-Based Scalable Security Infrastructure For Scalable Grid