Abstract:Large-scale scientific and engineering computation is normally accomplished through the interaction of collaborating groups and diverse heterogeneous resources. Grid computing is emerging as an applicable paradigm, whilst, there is a critical challenge of authorization in the grid infrastructure. This paper proposes a Parallelized Subtask-level Authorization Service architecture (PSAS) based on the least privilege principle, and presents a context-aware authorization approach and a flexible task management mechanism. The minimization of the privileges is conducted by decomposing the parallelizable task and re-allotting the privileges required for each subtask. The dynamic authorization is carried out by constructing a multi-value community policy and adaptively transiting the mapping. Besides applying a relevant management policy, a delegation mechanism collaboratively performs the authorization delegation for task management. In the enforcement mechanisms involved, the authors have extended the RSL specification and the proxy certificate, and have modified the Globus gatekeeper, jobmanager and the GASS library to allow authorization callouts. Therefore the authorization requirement of an application is effectively met in the presented architecture.

Study of grid authorization based on the decentralized trust management mechanism

A New Trust Framework for Resource-Sharing in the Grid Environment

Research of Community-based Multi-Grained Authorization in Service Grid

Community-based Model and Access Control for Information Grid

Supporting secure collaborative computing in grid environments

Design and implementation of a grid service security access platform based on GSI

An Instance-Oriented Security Mechanism in Grid-Based Mobile Agent System

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

Study of Equipment Grid Based on Simulation and Modeling

Secure Grid-Based Mobile Agent Platform By Instance-Oriented Delegation

Research on Multi-level Authorization Mechanism for Virtual Organization in Grid Computing System

Study on equipment grid service chain sharing technology and method

Authorization Mechanisms for Virtual Organization in Grid Computing Systems

Instance-oriented Delegation: A Solution for Providing Security to Grid-based Mobile Agent Middleware

Study on Equipment Interoperation Chain Model in Grid Environment

Distributed Authorization and Authentication Framework for a Grid Infrastructure

Study on Several Trust Models in Grid Environment

Distributed resource scheduling based on multi-node negotiation for grid systems

The Study on Simulation Grid Technology for Equipment Resource Sharing System

Flexible Authorization with Decentralized Access Control Model for Grid Computing

An Agent-Enabled Content-Explicit Authorization Model For Ogsa-Compliant Grid