Abstract:Large-scale scientific and engineering computation is normally accomplished through the interaction of collaborating groups and diverse heterogeneous resources. Grid computing is emerging as an applicable paradigm, whilst, there is a critical challenge of authorization in the grid infrastructure. This paper proposes a Parallelized Subtask-level Authorization Service architecture (PSAS) based on the least privilege principle, and presents a context-aware authorization approach and a flexible task management mechanism. The minimization of the privileges is conducted by decomposing the parallelizable task and re-allotting the privileges required for each subtask. The dynamic authorization is carried out by constructing a multi-value community policy and adaptively transiting the mapping. Besides applying a relevant management policy, a delegation mechanism collaboratively performs the authorization delegation for task management. In the enforcement mechanisms involved, the authors have extended the RSL specification and the proxy certificate, and have modified the Globus gatekeeper, jobmanager and the GASS library to allow authorization callouts. Therefore the authorization requirement of an application is effectively met in the presented architecture.

Towards Shibboleth-based Security in the e-Infrastructure for Social Sciences

Security Infrastructure for e-Social Science

A Guanxi Shibboleth Based Security Infrastructure

Secure Access To Grid Information Service Using Shibboleth And Permis

Design and Development of a Security System of EMR in HIE-oriented

Supporting secure collaborative computing in grid environments

Design and implementation of a grid service security access platform based on GSI

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Construction of security architecture of web services based EAI

Semantic-Aware Access Control for Grid Application

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

EATH: an Efficient Aggregate Authentication Protocol for Smart Grid Communications

Authentication and Authorization Infrastructure for Grids—issues, Technologies, Trends and Experiences

Developing an e-Infrastructure for Social Science

A review of grid authentication and authorization technologies and support for federated access control

The Design, Development and Application of a Proxy Credential Auditing Infrastructure for Collaborative Research

Security Scheme for Cross-Domain Grid: Integrating WS-Trust and Grid Security Mechanism

A Pki-Based Scalable Security Infrastructure For Scalable Grid

A Security Architecture Using Group Authentication and Collaboration of Grid Computing

Distributed Authorization and Authentication Framework for a Grid Infrastructure

Cross-Domain Grid Authentication and Authorization Scheme Based on Trust Management and Delegation