Using SAML to link the Globus Toolkit to the PERMIS authorisation infrastructure

IFIP Advances in Information and Communication Technology

Volumn 175, Issue , 2005, Pages 251-261

  Chadwick, David ^a   Otenko, Sassa ^a   Welch, Von ^b  

^a UNIVERSITY OF SALFORD   (United Kingdom)

^b UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Authorisation; Grid Computing; PDP; PEP; Policy decision making; RBAC; SAML; X.509 attribute certificates

Indexed keywords

DECISION MAKING;

ATTRIBUTE CERTIFICATE; AUTHORISATION; POLICY DECISIONS; RBAC; SAML;

GRID COMPUTING;

EID: 78651460476     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/0-387-24486-7_19     Document Type: Conference Paper

References (12)

1. OASIS. "Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML)". 19 April 2002. See http://www.oasis-open.org/committees/security/
2. Globus toolkit, http://www.globus.org/toolkit
3. D.W. Chadwick, A. Otenko, E. Ball. "Implementing Role Based Access Controls Using X.509 Attribute Certificates", IEEE Internet Computing, March-April 2003, pp. 62-69.
4. ITU-T Rec X.812 (1995) {pipe} ISO/IEC 10181-3:1996 "Security Frameworks for open systems: Access control framework"
5. Shibboleth Project, available at http://shibboleth.internet2.edu/
6. L. Pearlman, V. Welch, I. Foster, C. Kesselman, S. Tuecke. "A Community Authorization Service for Group Collaboration". Proceedings of the IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, 2002.
7. Johnston, W., Mudumbai, S., Thompson, M. "Authorization and Attribute Certificates for Widely Distributed Access Control, " IEEE 7th Int Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WET ICE), Stanford, CA. June, 1998. Page(s): 340-345 (see also http://www-itg.lbl.gov/security/Akenti/)
8. Von Welch, Frank Siebenlist, Ian Foster, John Bresnahan, Karl Czajkowski, Jarek Gawor, Carl Kesselman, Sam Meder, Laura Pearlman, and Steven Tuecke. Security for grid services. In Twelfth International Symposium on High Performance Distributed Computing (HPDC-12). IEEE Computer Society Press, 2003.
9. Von Welch, Frank Siebenlist, David Chadwick, Sam Meder, Laura Pearlman. "Use of SAML for OGSA Authorization", Jan 2004, Available from https://forge.gridforum.org/projects/ogsa-authz
10. ISO 9594-8/ITU-T Rec. X.509 (2001) The Directory: Public-key and attribute certificate frameworks
11. T. Howes, M. Smith. "The LDAP URL Format", RFC 2255, Dec 1997
12. ITU-T Recommendation X.680 (1997) {pipe} ISO/IEC 8824-1:1998, Information Technology-Abstract Syntax Notation One (ASN. l): Specification of Basic Notation