A Shibboleth-Protected Privilege Management Infrastructure for e-Science Education

Simplifying access to and usage of large scale compute resources via the Grid is of critical importance to encourage the uptake of e-Research. Security is one aspect that needs to be made as simple as possible for end users. The ESP-Grid and DyVOSE projects at the National e-Science Centre (NeSC) at the University of Glasgow are investigating security technologies which will make the end-user experience of using the Grid easier and more secure. In this paper we outline how simplified (from the user experience) authentication and authorization of users are achieved through single usernames and passwords at users’ home institutions. This infrastructure, which will be applied in the second year of the Grid Computing module part of the advanced MSc in Computing Science at the University of Glasgow, combines Grid portal technology, the Internet2 Shibboleth Federated Access Control infrastructure, and the PERMIS Role-Based Access Control technology. Through this infrastructure inter-insti...

• Type: Conference
• Year: 2006
• Where: CCGRID
• Authors: J. P. Watt, Oluwafemi Ajayi, Jipu Jiang, Jos Koetsier, Richard O. Sinnott
• Keywords: CCGRID 2006, Cluster Computing, Grid, Grid Computing Module, Shibboleth Federated Access