A secure collaboration service for dynamic virtual organizations

Information Sciences

Volumn 180, Issue 17, 2010, Pages 3086-3107

  Li, Jianxin ^a   Huai, Jinpeng ^a   Hu, Chunming ^a   Zhu, Yanmin ^b  

^a BEIHANG UNIVERSITY   (China)

^b SHANGHAI JIAO TONG UNIVERSITY   (China)

Author keywords

Distributed computing; Policy evaluation; Privacy; Secure collaboration; Security policy; Virtual organization

Indexed keywords

COLLABORATION SERVICES; COMPUTING ENVIRONMENTS; DIFFERENT DOMAINS; DISTRIBUTED ALGORITHM; DISTRIBUTED COMPUTING; EXPERIMENTAL STUDIES; MULTIPLE DOMAINS; POLICY CONFLICT; PRIVACY POLICIES; RESOURCE SHARING; RESOURCES SHARING; SECURITY POLICY; SECURITY THREATS; SYSTEM ARCHITECTURES; VIRTUAL ORGANIZATION;

EQUIPMENT TESTING; INTERNET PROTOCOLS; NETWORK ARCHITECTURE; SECURITY OF DATA; SECURITY SYSTEMS; SOCIETIES AND INSTITUTIONS;

COMPUTATION THEORY;

EID: 77953651101     PISSN: 00200255     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ins.2010.05.014     Document Type: Article

References (35)

1. C.Y. Andrew, Protocols for secure computations, in: Proceedings of the 23rd Annual Symposium on Foundations of Computer Science, 1982, pp. 160-164.
2. M. Armbrust, A. Fox, R. Griffith, A.D. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, M. Zaharia, Above the clouds: a berkeley view of cloud computing, 2009. Available from: .
3. Clarke D., Elien J.-E., Ellison C., Fredette M., Morcos A., and Rivest R.L. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security 9 4 (2001) 285-322
4. R. Deitos, F. Kerschbaum, P. Robinson, A comprehensive security architecture for dynamic, web service based virtual organizations for businesses, in: Proceedings of the 3rd ACM Workshop on Secure Web Services Alexandria, Virginia, USA, 2006, pp. 103-104.
5. T. Dimitrakos, G. Laria, I. Djordjevic, N. Romano, F. D'Andria, V. Trpkovski, P. Kearney, M. Gaeta, P. Ritrovato, L. Schubert, B. Serhan, L. Titkov, S. Wesner, Towards a grid platform enabling dynamic virtual organizations for business applications, in: iTrust 2005, Oxford, UK, 2005, pp. 406-410.
6. S. Du, J.B.D. Joshi, Supporting authorization query and inter-domain role mapping in presence of hybrid role hierarchy, in: The 11th ACM Symposium on Access Control Models and Technologies (SACMAT2006), Lake Tahoe, California, USA, 2006, pp. 228-236.
7. I. Foster, C. Kesselman, S. Tuecke, The anatomy of the grid: enabling scalable virtual organizations, in: Proceedings of the 7th International Euro-Par Conference Manchester on Parallel Processing, 2001, pp. 1-20.
8. E. Freudenthal, T. Pesin, L. Port, E. Keenan, dRBAC: distributed role-based access control for dynamic coalition environments, in: The 22nd International Conference on Distributed Computing Systems (ICDCS'02), Vienna, Austria, 2002, pp. 411-420.
9. Frikken K., Atallah M., and Li J. Attribute-based access control with hidden policies and hidden credentials. IEEE Transaction on Computers 55 10 (2006) 1259-1270
10. K.B. Frikken, J. Li, M.J. Atallah, Trust negotiation with hidden credentials, hidden policies, and policy cycles, in: Network and Distributed System Security Symposium (NDSS 2006), San Diego, California, USA, 2006.
11. Gong L., and Qian X. Computational issues in secure interoperation. IEEE Transaction on Software and Engineering 22 1 (1996) 43-52
12. Huai J., Hu C., Li J., Sun H., and Wo T. CROWN: a service grid middleware with trust management mechanism. Science in China Series F: Information Sciences 49 6 (2007) 731-758
13. T. Kataoka, T. Nishimura, M. Shimaoka, K. Yamaji, M. Nakamura, N. Sonehara, Y. Okabe, Leveraging PKI in SAML 2.0 federation for enhanced discovery service, in: The 9th Annual International Symposium on Applications and the Internet, 2009, pp. 239-242.
14. Leea Y., Kima H., and Parkb Y. An efficient delegation protocol with delegation traceability in the X.509 proxy certificate environment for computational grids. Information Sciences 178 14 (2008) 2968-2982
15. Li J., Zhang D., Huai J., and Xu J. Context-aware trust negotiation in peer-to-peer service collaborations. Peer-to-Peer Networking and Applications 2 2 (2009) 164-177
16. N. Li, W. Du, D. Boneh, Oblivious signature-based envelope, in: Proceedings of the 22nd Annual Symposium on Principles of Distributed Computing, Boston, Massachusetts, 2003, pp. 182-189.
17. Li N., Winsborough W.H., and Mitchell J.C. Distributed credential chain discovery in trust management. Journal of Computer Security 11 1 (2003) 35-86
18. Q. Li, J. Li, J. Huai, X. Liu, C. Hu, CROWN-ST: security and trustworthiness architecture for CROWN grid, in: IEEE International Conference on e-Science and Grid Computing (eScience2006), Amsterdam, Netherlands, 2006, pp. 23-31.
19. H. Lockhart, S. Andersen, J. Bohren, Y. Sverdlov, M. Hondo, H. Maruyama, A. Nadalin, N. Nagaratnam, T. Boubez, K.S. Morrison, C. Kaler, A. Nanda, D. Schmid, D. Walters, H. Wilson et al., Web Services Federation Language (WS-Federation), 2006. Available from: .
20. L. Pearlman, V. Welch, I. Foster, C. Kesselman, S. Tuecke, A community authorization service for group collaboration, in: The IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, Monteray, California, USA, 2001, pp. 50-58.
21. Periorellis P., Cook N., and Hiden H. GOLD infrastructure for virtual organisations. Concurrency and Computation: Practice & Experience 20 11 (2006) 1273-1288
22. Power D., Slaymaker M., and Simpson A. On formalizing and normalizing role-based access control systems. The Computer Journal 52 3 (2009) 305-325
23. Dawson S., Qian S., and Samarati P. Providing security and interoperation of heterogeneous systems. Distributed Parallel Databases 8 1 (2000) 119-145
24. K. Seamons, M. Winslett, T. Yu, L. Yu, R. Jarvis, Protecting privacy during on-line trust negotiation, in: Proceedings of 2nd Workshop on Privacy Enhancing Technologies, 2003, pp. 249-253.
25. K.E. Seamons, M. Winslett, T. Yu, Limiting the disclosure of access control policies during automated trust negotiation, in: Network and Distributed System Security Symposium (NDSS 2001), San Diego, California, 2001.
26. Shafiq B., Joshi J.B.D., Bertino E., and Ghafoor A. Secure interoperation in a multidomain environment employing RBAC policies. IEEE Transactions on Knowledge and Data Engineering 17 11 (2005) 1557-1577
27. M. Shehab, E. Bertino, A. Ghafoor, Secure collaboration in mediator-free environments, in: Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS05), Alexandria, VA, USA, 2005, pp. 58-67.
28. Smith D. The challenge of federated identity management. Network Security 2008 4 (2008) 7-9
29. Sun D.Z., Huai J.P., Sun J.Z., Li J.X., Zhang J.W., and Feng Z.Y. Improvements of Juang et al.'s password-authenticated key agreement scheme using smart cards. IEEE Transactions on Industrial Electronics 56 6 (2009) 2284-2291
30. Sun D.Z., Huai J.P., Sun J.Z., Zhang J.W., and Feng Z.Y. A new design of wearable token system for mobile device security. IEEE Transactions on Consumer Electronics 54 4 (2008) 1784-1789
31. Venturi V., Riedel M., Memon S., Stagni F., Schuller B., Mallmann D., Tweddell B., Gianoli A., Berghe S.v.d., Snelling D., and Streit A. Using SAML-based VOMS for authorization within web services-based UNICORE grids. Lecture Notes in Computer Science 4854 (2008) 112-120
32. H. Wang, S. Jha, M. Livny, P.D. McDaniel, Security policy reconciliation in distributed computing environments, in: Fifth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'04), 2004, pp. 137-145.
33. V. Welch, T. Barton, K. Keahey, F. Siebenlist, Attributes, anonymity, and access: shibboleth and globus integration to facilitate grid collaboration, in: The 4th Annual PKI R&D Workshop, NIST Gaithersburg, MD, 2005.
34. T. Yu, Automated trust establishment in open systems, in: School of Computer, vol. PhD: University of Illinois at. Urbana-Champaign, 2003.
35. T. Yu, M. Winslett, A unified scheme for resource protection in automated trust negotiation, in: Proceedings of the 2003 IEEE Symposium on Security and Privacy (S&P2003), 2003, pp. 110-122.