Abstract:Large-scale scientific and engineering computation is normally accomplished through the interaction of collaborating groups and diverse heterogeneous resources. Grid computing is emerging as an applicable paradigm, whilst, there is a critical challenge of authorization in the grid infrastructure. This paper proposes a Parallelized Subtask-level Authorization Service architecture (PSAS) based on the least privilege principle, and presents a context-aware authorization approach and a flexible task management mechanism. The minimization of the privileges is conducted by decomposing the parallelizable task and re-allotting the privileges required for each subtask. The dynamic authorization is carried out by constructing a multi-value community policy and adaptively transiting the mapping. Besides applying a relevant management policy, a delegation mechanism collaboratively performs the authorization delegation for task management. In the enforcement mechanisms involved, the authors have extended the RSL specification and the proxy certificate, and have modified the Globus gatekeeper, jobmanager and the GASS library to allow authorization callouts. Therefore the authorization requirement of an application is effectively met in the presented architecture.

A Hybrid Authorization Model for Project-Oriented Workflow

Access control mechanism of cooperation-oriented flexible workflow

A Task-Role Based Access Control Model with Multi-Constraints

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

A Policy-Based Authorization Model for Workflow-Enabled Dynamic Process Management

ROLE-BASED ACCESS CONTROL MODEL FOR ADAPTIVE WORKFLOW SYSTEMS

Supporting secure collaborative computing in grid environments

The Mechanism of Delegation Safety Based on Project of Workflow

Flexible Policy Access Control Model for Workflow Systems

An Expression-based Workflow Authorization Model

Workflow Dynamic Authorization Model with Role-Based Access Control

Conflict Detection and Resolution for Authorization Policies in Workflow Systems

Workflow Access Control Model and Dynamic User Assignment Policy

Study on the Application of Role-based Access Control in Workflow Management System

Modeling and Analyzing of Workflow Authorization Management

Flexible Context-Constraint-based Access Control Model for Workflows

Authorization and Access Control of Application Data in Workflow Systems

Role-Based Access Control Model for Workflow Systems

Team Work Oriented Flexible Workflow Management System.

Owpa: an Ontology-Based Approach to Adaptable Workflow Participant Assignment

An Extended Policy Language for Role Resolution in Project-Oriented Workflow