Abstract:Large-scale scientific and engineering computation is normally accomplished through the interaction of collaborating groups and diverse heterogeneous resources. Grid computing is emerging as an applicable paradigm, whilst, there is a critical challenge of authorization in the grid infrastructure. This paper proposes a Parallelized Subtask-level Authorization Service architecture (PSAS) based on the least privilege principle, and presents a context-aware authorization approach and a flexible task management mechanism. The minimization of the privileges is conducted by decomposing the parallelizable task and re-allotting the privileges required for each subtask. The dynamic authorization is carried out by constructing a multi-value community policy and adaptively transiting the mapping. Besides applying a relevant management policy, a delegation mechanism collaboratively performs the authorization delegation for task management. In the enforcement mechanisms involved, the authors have extended the RSL specification and the proxy certificate, and have modified the Globus gatekeeper, jobmanager and the GASS library to allow authorization callouts. Therefore the authorization requirement of an application is effectively met in the presented architecture.

Design and implementation of a grid service security access platform based on GSI

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Supporting secure collaborative computing in grid environments

Research of Community-based Multi-Grained Authorization in Service Grid

Design and Implementation of an Universal Grid Portal Component

A Grid Service-Based Engineering Computation Architecture.

A Security System Using Multiple Certifications in Grid Environments

Security Architecture for a Service-Oriented Learning Assessment Grid

Security Protection of Grid Relay Protection and Fault Information System

Portal Access to Scientific Computation and Customized Collaborative Visualization on Campus Grid

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

Grid Service-Based Parallel Finite Element Analysis

Design and Research of Security Service Platform for Power Terminal Business Monitoring and Data Analysis

Semantic-Aware Access Control for Grid Application

The Design and Implementation of Scalable Information Services in a Grid Environment

Secure Grid-Based Mobile Agent Platform By Instance-Oriented Delegation

Instance-oriented Delegation: A Solution for Providing Security to Grid-based Mobile Agent Middleware

Overview of the Research on Grid Security Technologies

A Pki-Based Scalable Security Infrastructure For Scalable Grid

The Design of a Component Based Secure Grid Computing Environment

SECURITY INFRASTRUCTURES OF OPEN GRID SERVICES ARCHITECTURE