Authentication and authorization mechanisms for multi-domain grid environments

Journal of Grid Computing

Volumn 2, Issue 4, 2004, Pages 301-311

  Cornwall, Linda A ^a   Jensen, Jens ^a   Kelsey, David P ^a   Frohner, Ákos ^b   Kouřil, Daniel ^c   Bonnassieux, Franck ^d   Nicoud, Sophie ^d   Lorentey, Károly ^e   Hahkala, Joni ^f   Silander, Mika ^f   Cecchini, Roberto ^g   Ciaschini, Vincenzo ^g   dell'Agnello, Luca ^g   Spataro, Fabio ^g   O'Callaghan, David ^h   Mulmo, Olle ⁱ   Volpato, Gian Luca ⁱ   Groep, David ^j   Steenbakkers, Martijn ^j   Mcnab, Andrew ^k  

^a RUTHERFORD APPLETON LABORATORY   (United Kingdom)

^b CERN   (Switzerland)

^c CESNET   (Czech Republic)

^d CNRS   (France)

^e EÖTVÖS LORÁND UNIVERSITY   (Hungary)

^f HELSINKI INSTITUTE OF PHYSICS   (Finland)

^g INFN SEZIONE DI ROMA   (Italy)

^h TRINITY COLLEGE DUBLIN   (Ireland)

ⁱ ROYAL INSTITUTE OF TECHNOLOGY   (Sweden)

^j NIKHEF   (Netherlands)

^k UNIVERSITY OF MANCHESTER   (United Kingdom)

more..

Author keywords

Authentication; Authorization; Grid; Security

Indexed keywords

AUTHENTICATION AND AUTHORIZATION; AUTHORIZATION; DATA GRIDS; GRID; GRID ENVIRONMENTS; MULTI DOMAINS; SECURITY;

GRID COMPUTING;

AUTHENTICATION;

EID: 33846831855     PISSN: 15707873     EISSN: None     Source Type: Journal    
DOI: 10.1007/s10723-004-8182-y     Document Type: Article

References (32)

1. F. Gagliardi, B. Jones, M. Reale and S. Burke, "European DataGrid Project: Experiences of Deploying a Large Scale Testbed for E-Science Applications", in Performance Evaluation of Complex Systems: Techniques and Tools, Performance 2002, Tutorial Lectures. Lecture Notes in Computer Science, Vol. 2459, Springer, 2002. http://www.edg.org
2. D. Kelsey and L. Cornwall, "DataGrid Security Requirements and Testbed-1 Security Implementation, D7.5", The European DataGrid Project, 2002-05-28. https://edms.cern.ch/document/340234
3. R. Alfieri, R. Cecchini, V. Ciaschini, L. dell Agnello, A. Gianoli, F. Spataro, F. Bonnassieux, P. Broadfoot, G. Lowe, L. Cornwall, J. Jensen, D. Kelsey, A. Frohner, D.L. Groep, W. Som de Cerff, M. Steenbakkers, G. Venekamp, D. Kouril, A. McNab, O. Mulmo, M. Silander, J. Hahkala and K. Lorentey, "Managing Dynamic User Communities in a Grid of Autonomous Resources", in Proceedings of Computing in High Energy Physics 2003, La Jolla - San Diego, March 24-28 2003.
4. A. Frohner et al., "DataGrid Security Design, D7.6", The European DataGrid Project, 2003-03-28. https://edms.cern.ch/document/344562
5. I. Foster, C. Kesselman, G. Tsudik and S. Tuecke, "A Security Architecture for Computational Grids", in Proceedings of the 5th ACM Conference on Computer and Communications Security, pp. 83-92, 1998. Describes techniques for authentication in wide area computing environments.
6. IETF, Public-Key Infrastructure (pkix) Charter.
7. C. Adams and S. Lloyd, Understanding PKI: Concepts, Standards, and Deployment Considerations, 2nd ed. Addison-Wesley, 2002.
8. S. Tuecke, V. Welch, D. Engert, L. Pearlman and M. Thompson, "Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile", RFC3820, June 2004. http://www.rfc-editor.org/rfc/rfc3820.txt
9. S. Chokhani, W. Ford, R. Sabett, C. Merrill and S. Wu, "Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework", RFC3647, November 2003. http://www.rfc-editor.org/rfc/rfc3647.txt
10. Policy of the TERENA Academic CA Repository, Version 1.0, 29 January 2004.
11. European Policy Management Authority for Grid Authentication in e-Science Charter, Version 1.0, 2004-04-01.
12. eInfrastructure Reflection Group, White Paper, Dublin, 2004-04-13.
13. Asia Pacific Grid Policy Management Authority Charter, Version 1.0, 2004-06-01.
14. International Grid Policy Management Authority. http://gridpma.org (2003-03-01).
15. J.A. Templon and D.A. Groep, "VO Server Information", Documentation of the European DataGrid Project, 2004-10-23.
16. Research and Technological Development for a Data TransAtlantic Grid. http://www.datatag.org (2004-06-01).
17. R. Alfieri, R. Cecchini, V. Ciaschini, L. dell Agnello, Á. Frohner, A. Gianoli, K. L{double acute accent}orentey and F. Spataro, "VOMS, an Authorization System for Virtual Organizations", in Proceedings of the 1st European Across Grids Conference, Santiago de Compostela, February 13-14 2003.
18. S. Farrell and R. Housley, "An Internet Attribute Certificate Profile for Authorization", RFC3281, April 2002. http://www.rfc-editor.org/rfc/rfc3281.txt
19. A. McNab, "Grid-Based Access Control and User Management for Unix Environments, Filesystems, Web Sites and Virtual Organisations", in Proceedings of CHEP 2003, La Jolla, CA, March 2003.
20. M. Steenbakkers, "Guide to LCAS, Version 1.1.16", 15 September 2003. Documentation of the European DataGrid Project.
21. M. Steenbakkers, "Guide to LCMAPS, Version 0.0.16", 15 September 2003. Documentation of the European DataGrid Project.
22. D. Skow, I. Mandrichenko and V. Sehkri, "Site Authorization Service (SAZ)", in Proceedings of CHEP 2003, La Jolla, CA, eConf C0303241, 2003, TUBT007 [arXiv:cs.dc/0306100].
23. J. Novotny, S. Tuecke and V. Welch, "An Online Credential Repository for the Grid:MyProxy", in Proceedings of the 10th International Symposium on High Performance Distributed Computing (HPDC-10), IEEE Press, August 2001.
24. J. Hahkala, "Guide for EDG Security for Java 1.5.6", 13 October 2003. Documentation of the European DataGrid Project.
25. A.T. Doyle, S.L. Lloyd and A. McNab, "GridSite, GACL and SlashGrid: Giving Grid Security to Web and File Applications", in Proceedings of the UK e-Science All Hands Conference, Sheffield, September 2002.
26. D. Britton, P. Clarke, J. Coles, D. Colling, A. Doyle, S.M. Fisher, A.C. Irving, J. Jensen, A. McNab and D. Newbold, "A Grid for Particle Physics - from Testbed to Production", in Proceedings of the UK e-Science All Hands Conference, Nottingham, September 2004.
27. eXtensible Access ControlMarkup Language (XACML), Version 1.0, OASIS Standard, 18 February 2003. http://www.oasis-open.org/specs/index.php#xacmlv1.0.
28. L. Cornwall et al., DataGrid Security Implementation, D7.7", European DataGrid Project, 2004-01-27. https://edms.cern.ch/document/414762
29. LHC Computing Grid Project. http://cern.ch/lcg (2004-06-01).
30. O. Kornievskaia, P. Honeyman, B. Doster and K. Coffman, Kerberized Credential Translation: A Solution toWeb Access Control", February 2001, in Proceedings of USENIX Security Symposium, Washington, DC (August 2001).
31. A. Hanushevsky and R. Cowles, "Mechanisms to Secure x.509 Grid Certificates", in Proceedings of CHEP 2003.
32. Security Assertion Markup Language (SAML), Version 1.1, OASIS Standard, 2 September 2003. http://www.oasisopen.org/specs/index.php#samlv1.1.