Abstract:Large-scale scientific and engineering computation is normally accomplished through the interaction of collaborating groups and diverse heterogeneous resources. Grid computing is emerging as an applicable paradigm, whilst, there is a critical challenge of authorization in the grid infrastructure. This paper proposes a Parallelized Subtask-level Authorization Service architecture (PSAS) based on the least privilege principle, and presents a context-aware authorization approach and a flexible task management mechanism. The minimization of the privileges is conducted by decomposing the parallelizable task and re-allotting the privileges required for each subtask. The dynamic authorization is carried out by constructing a multi-value community policy and adaptively transiting the mapping. Besides applying a relevant management policy, a delegation mechanism collaboratively performs the authorization delegation for task management. In the enforcement mechanisms involved, the authors have extended the RSL specification and the proxy certificate, and have modified the Globus gatekeeper, jobmanager and the GASS library to allow authorization callouts. Therefore the authorization requirement of an application is effectively met in the presented architecture.

Cross-Domain Grid Authentication and Authorization Scheme Based on Trust Management and Delegation

A New Trust Framework for Resource-Sharing in the Grid Environment

Supporting secure collaborative computing in grid environments

Design and implementation of a grid service security access platform based on GSI

Inter-domain authentication scheme for Pervasive Computing Environments

An Inter-Domain Authentication Scheme For Pervasive Computing Environment

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Using trust for restricted delegation in grid environments

Instance-oriented Delegation: A Solution for Providing Security to Grid-based Mobile Agent Middleware

An Instance-Oriented Security Mechanism in Grid-Based Mobile Agent System

Distributed Authorization and Authentication Framework for a Grid Infrastructure

Semantic-Aware Access Control for Grid Application

Secure Grid-Based Mobile Agent Platform By Instance-Oriented Delegation

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Community-based Model and Access Control for Information Grid

Flexible Authorization with Decentralized Access Control Model for Grid Computing

Using Trust and Risk in Access Control for Grid Environment

Cross-Domain Security Auditing Architecture and Implement in Grid Based on Mobile Agent

Xml Based X.509 Authorization In Cernet Grid

Study on Several Trust Models in Grid Environment