The case for using Bridge Certificate Authorities for Grid computing

Software - Practice and Experience

Volumn 35, Issue 9, 2005, Pages 817-826

  Humphrey, Marty ^a   Basney, Jim ^b   Jokl, Jim ^a  

^a University of Virginia   (United States)

^b UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Authentication; Bridge Certificate Authority; Grid computing; PKI

Indexed keywords

COMPUTER APPLICATIONS; COMPUTER ARCHITECTURE; COMPUTER SOFTWARE; DECISION MAKING; NETWORK PROTOCOLS; RESOURCE ALLOCATION; ROBUSTNESS (CONTROL SYSTEMS); VIRTUAL REALITY;

AUTHENTICATION; BRIDGE CERTIFICATE AUTHORITY; GRID COMPUTING; PKI;

PUBLIC KEY CRYPTOGRAPHY;

EID: 22144434836     PISSN: 00380644     EISSN: None     Source Type: Journal    
DOI: 10.1002/spe.689     Document Type: Conference Paper

References (31)

1. Foster I, Kesselman C, Tuecke S. The physiology of the Grid: An Open Grid Services Architecture for distributed systems integration. Draft of 6/22/02. Available at: http://www.gridforum.org/ogsi-wg/drafts/ogsa-draft2.9_2002-06-22. pdf.
2. Humphrey M, Thompson M. Security implications of typical Grid computing usage scenarios. Proceedings of the 10th International Symposium on High Performance Distributed Computing (HPDC-10), San Francisco, CA, 7-9 August 2001.
3. Public-key infrastructure (X.509) (pkix) page, http://www.ietf.org/html. charters/pkix-charter.html [15 October 2004].
4. Neuman BC, Ts'o T. Kerberos: An authentication service for computer networks. IEEE Communications 1994; 32(9):33-38.
5. ITU-T Recommendation X.509 (1997 E). Information technology - open systems Interconnection - the directory: Authentication framework, June 1997.
6. Dierks T, Rescorla E. The TLS Protocol Version 1.1. RFC 2246, March 2004. Available at: http://www.ietf.org/internet-drafts/draft-ietf-tls-rfc2246-bis- 06.txt.
7. Foster I, Kesselman C, Tsudik G, Tuecke S. A security architecture for computational grids. Proceedings of the 5th ACM Conference on Computer and Communications Security Conference. ACM Press: New York, 1998; 83-92.
8. Butler R, Engert D, Foster I, Kesselman C, Tuecke S, Volmer J, Welch V. A national-scale authentication infrastructure. IEEE Computer 2000; 33(12):60-66.
9. Globus project page, http://www.globus.org/ [15 October 2004].
10. Housely R, Polk W, Ford W, Solo D. Internet X.509 public key infrastructure certificate and certificate revocation list (CRL) profile. RFC 3280, April 2002. Available at: http://www.ietf.org/rfc/rfc3280.txt.
11. Myers M, Ankney R, Malpani A, Galperin S, Adams C. X.509 Internet public key infrastructure online certificate status protocol (OCSP). RFC 2560, June 1999. Available at: http://www.ietf.org/rfc/rfc2560.txt.
12. Clarke R. The fundamental inadequacies of conventional public key infrastructure. Proceedings of the European Conference on Information Systems, Bled, Slovenia, June 2001. Available at: http://www.anu.edu.au/people/Roger. Clarke/II/ECIS2001.html.
13. Ellison C, Schneier B. Ten risks of PKI: What you're not being told about Public Key Infrastructure. Computer Security Journal 2000; 16(1): 1-7.
14. European Policy Management Authority for Grid Authentication page. http://www.eugridpma.org/ [15 October 2004].
15. Higher education PKI technical activities group (HEPKI-TAG) page. http://middleware.internet2.edu/hepki-tag/ [15 October 2004].
16. Higher education bridge certificate authority (HEBCA) page, http://www.educause.edu/hebca/ [15 October 2004].
17. Federal bridge certificate authority page, http://csrc.nist.gov/pki/fbca/ welcome.html [15 October 2004].
18. Web services resource framework page. http://www-106.ibm.com/ developerworks/webservices/library/ws-resource/ [15 October 2004].
19. WSRF.NET: Web services resource framework on.NET page, http://www.ws-rf.net [15 October 2004].
20. Humphrey M, Wasson G, Morgan M, Beekwilder N. An early evaluation of WSRF and WS-Notification via WSRF.NET. 2004 Grid Computing Workshop (associated with Supercomputing 2004), Pittsburgh, PA, 8 November 2004.
21. Jokl J, Basney J, Humphrey M. Experiences using Bridge CAs for Grids. Proceedings of Workshop on Grid Security Practice and Experience (U.K. e-Science Security Task Force), Oxford, 8-9 July 2004.
22. Technical Report YCS-2004-380, Department of Computer Science, University of York. Available at: http://www.cs.york.ac.uk/ftpdir/reports/.
23. Novotny J, Tuecke S, Welch V. An online credential repository for the Grid: MyProxy. Proceedings of the 10th International Symposium on High Performance Distributed Computing (HPDC-10), San Francisco, CA, 7-9 August 2001.
24. MyProxy online credential repository page, http://grid.ncsa.uiuc.edu/ myproxy/ [15 October 2004].
25. Polk T, Hastings N. Bridge certification authorities: Connecting B2B public key infrastructures. PKI Forum Meeting Proceedings, June 2000.
26. TeraGrid page, http://www.teragrid.org [15 October 2004].
27. Internet2 Windows XP PKI bridge path validation experiment page, http://pkidev.internet2.edu/bridge/ [15 October 2004].
28. RSA Laboratories. PKCS 12 v 1.0: Personal Information Exchange Syntax, June 1999. Available at: ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-12/pkcs-12v1. pdf.
29. Libpkix sourceforge page, http://libpkix.sourceforge.net/ [15 October 2004].
30. Microsoft Web Services Enhancements (WSE) page. http://msdn.microsoft. com/webservices/building/wse/default.aspx [15 October 2004].
31. RSA Laboratories. Cryptographic Message Syntax Standard. PKCS 7. An RSA Laboratories technical note, version 1.5. Revised 1 November 1993.