Abstract:Large-scale scientific and engineering computation is normally accomplished through the interaction of collaborating groups and diverse heterogeneous resources. Grid computing is emerging as an applicable paradigm, whilst, there is a critical challenge of authorization in the grid infrastructure. This paper proposes a Parallelized Subtask-level Authorization Service architecture (PSAS) based on the least privilege principle, and presents a context-aware authorization approach and a flexible task management mechanism. The minimization of the privileges is conducted by decomposing the parallelizable task and re-allotting the privileges required for each subtask. The dynamic authorization is carried out by constructing a multi-value community policy and adaptively transiting the mapping. Besides applying a relevant management policy, a delegation mechanism collaboratively performs the authorization delegation for task management. In the enforcement mechanisms involved, the authors have extended the RSL specification and the proxy certificate, and have modified the Globus gatekeeper, jobmanager and the GASS library to allow authorization callouts. Therefore the authorization requirement of an application is effectively met in the presented architecture.

A New Trust Framework for Resource-Sharing in the Grid Environment

Using Trust and Risk in Access Control for Grid Environment

Community-based Model and Access Control for Information Grid

Semantic-Aware Access Control for Grid Application

Anonymous authorization in trust management

Supporting secure collaborative computing in grid environments

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

A Trust-Role Based Context Aware Access Control Model

Study on Several Trust Models in Grid Environment

ResourceDog: A Trusted Resource Discovery and Automatic Invocation P2P Framework

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

Distributed Authorization and Authentication Framework for a Grid Infrastructure

A Framework to Provide Trust and Incentive in CROWN Grid for Dynamic Resource Management

Trust Management in the P2P Grid.

Research of Trust Quantification Based on Grid System

Using trust for restricted delegation in grid environments

Trust-Risk-Game Based Access Control in Cross Domain Application

Trust Based Access Control in Infrastructure-Centric Environment

TruGrid: A Self-Sustaining Trustworthy Grid.

Flexible Authorization with Decentralized Access Control Model for Grid Computing

Trust and Privacy in Dissemination Control.