VO-based dynamic security associations in collaborative grid environment

Proceedings of the 2006 International Symposium on Collaborative Technologies and Systems, CTS 2006

Volumn 2006, Issue , 2006, Pages 38-47

  Demchenko, Yuri ^a   Gommans, Leon ^a   De Laat, Cees ^a   Steenbakkers, Martijn ^a   Ciaschini, Vincenzo ^b   Venturi, Valerio ^b  

^a UNIVERSITY OF AMSTERDAM   (Netherlands)

^b INFN SEZIONE DI ROMA   (Italy)

Author keywords

Authorisation; Dynamic security association; Grid based collaborative environment; Security services; Virtual organisation; VOMS

Indexed keywords

AUTHORIZATION; COMPLEX RESOURCE PROVISIONING; DYNAMIC SECURITY ASSOCIATION; GRID-BASED COLLABORATIVE ENVIRONMENT; SECURITY SERVICES; VIRTUAL ORGANIZATION; VIRTUAL ORGANIZATION MEMBERSHIP SERVICE (VOMS);

DISTRIBUTED COMPUTER SYSTEMS; MIDDLEWARE; PROJECT MANAGEMENT; SECURITY OF DATA; VIRTUAL REALITY;

COMPUTER SUPPORTED COOPERATIVE WORK;

EID: 33845584644     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CTS.2006.71     Document Type: Conference Paper

References (22)

1. Foster, I., Kesselman, C. and Tuecke, S. The Anatomy of the Grid: Enabling Scalable Virtual Organizations. International Journal of Supercomputer Applications, 15 (3). 200-222. 2001.
2. Foster, I., Kesselman, C., Nick, J. and Tuecke, S. The Physiology of the Grid: An Open Grid Services Architecture for Distributed Systems Integration. Globus Project, 2002. www.globus.org/research/papers/ogsa.pdf.
3. Foster, I. et al, "The Open Grid Services Architecture, Version 1.0", GFD.30, Global Grid Forum, 29 January 2005, available from http://www.gridforum.org/documents/GFD.30.pdf
4. Demchenko Yu., "Virtual Organisations in Computer Grids and Identity Management," Elsevier Information Security Technical Report - Volume 9, Issue 1, January-March 2004, Pages 59-76.
5. Gommans, L., B. Oudenaarde, C. de Laat, T. Lavian, I. Monga, A. Taal, F. Travostino, F. Wan, "Applications Drive Secure Lightpath Creation across Heterogeneous Domains", IEEE Communications Magazine, Feature topic Optical Control Planes for Grid Networks: Opportunities, Challenges and the Vision, scheduled to be published in the March 2006 issue.
6. Demchenko, Y., L. Gommans, C. de Laat, B. Oudenaarde, A. Tokmakoff, M. Snijders, "Job-centric Security model for Open Collaborative Environment," The 2005 International Symposium on Collaborative Technologies and Systems, Saint Louis, USA, May 15-19, 2005, Proceedings. IEEE Computer Society, ISBN: 0-7695-2387-0, pp. 69-77.
7. Laat de, C., G. Gross, L. Gommans, J. Vollbrecht, D. Spence, "Generic AAA Architecture," Experimental RFC 2903. Internet Engineering Task Force, August 2000. ftp://ftp.isi.edu/in-notes/rfc2903.txt
8. Vollbrecht, J., P. Calhoun, S. Farrell, L. Gommans, G. Gross, B. de Bruijn, C. de Laat, M. Holdrege, D. Spence, "AAA Authorization Framework," Informational RFC 2904. Internet Engineering Task Force, August 2000. ftp://ftp.isi.edu/in-notes/rfc2904.txt
9. Dimou, M., I. Neilson, "Virtual Organisation Registration Procedure," EGEE Project document, available from https://edms.cem.ch/ document/503245/
10. Neilson, I., "LCG/EGEE Virtual Organisation Security Policy," EGEE Project document, available from https://edms.cern.ch/document/573348/
11. "Virtual Organization Membership Service (VOMS)," available from http://infnforge.cnaf.infn.it/voms/
12. "VOMS Attribute Certificate for Authorisation, ", available from http://infnforge.cnaf.infn.it/voms/AC-RFC.pdf
13. RFC 3820, Standard Track, "Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile" S. Tuecke, V. Welch, D. Engert, L. Pearlman, M. Thompson, June 2004 - ftp://ftp.isi.edu/in-notes/rfc3820.txt
14. "VOMRS - Virtual Organization Management Registration Service," available from http://www-unix.gnds-center.org/r6/ecosystem/security/vomrs.php
15. "GridShib - A Policy Controlled Attribute Framework" available from http://grid.ncsa.uiuc.edu/GridShib/
16. Andrieux, A. et al, "Web Services Agreement Specification (WS-Agreement)," August 2004, available from https://forge.gridforum.org/ projects/graap-wg/document/WS-AgreementSpecification/
17. Anderson, S. et al., "Web Services Trust Language (WS-Trust)," February 2005, available from ftp://www6.software.ibm.com/software/developer/ library/ws-trust.pdf
18. Bajaj, S. et al., "Web Services Policy Framework (WS-Policy), Version 1.1," September 2004, available from http://msdn.microsoft.com/ws/ 2004/09/policy/
19. Bajaj, S. et al., "Web Services Federation Language (WS-Federation), Version 1.0," July 8 2003, available from http://msdn.microsoft.com/ws/ 2003/07/ws-federation/
20. Arends, R., R. Austein, M. Larson, D. Massey, S. Rose, "Resource Records for the DNS Security Extensions", RFC4034. - http://www.rfc- archive.org/getrfc.php?rfc=4034
21. Ciaschini, V., A.Ferraro, A.Ghiselli, G.Rubini, R.Zappi, "G-PBox: A Policy framework for Grid Environments", The 2004 Conference of High Energy Physics, Interlaken, Switzerland, 27 September -1 October, 2004, Proceedings.
22. Thompson, M., V. Welch, M. Lorch, R. Lepro, D. Chadwidk, V. Ciaschini, "Attributes used in OGSI Authorisation", GFD-E.057, Global Grid Forum, 12 December 2005, available from http://www.gridforum.org/documents/GFD. 57.pdf