Experiences of Applying Advanced Grid Authorisation Infrastructures

The widespread acceptance and uptake of Grid technology can only be achieved if it can be ensured that the security mechanisms needed to support Grid based collaborations are at least as strong as local security mechanisms. The predominant way in which security is currently addressed in the Grid community is through Public Key Infrastructures (PKI) to support authentication. Whilst PKIs address user identity issues, authentication does not provide fine grained control over what users are allowed to do on remote resources (authorisation). The Grid community have put forward numerous software proposals for authorisation infrastructures such as AKENTI [1], CAS [2], CARDEA [3], GSI [4], PERMIS [5,6,7] and VOMS [8,9]. It is clear that for the foreseeable future a collection of solutions will be the norm. To address this, the Global Grid Forum (GGF) have proposed a generic SAML based authorisation API which in principle should allow for fine grained control for authorised access to any Grid...

• Type: Conference
• Year: 2005
• Where: EGC
• Authors: Richard O. Sinnott, A. J. Stell, David W. Chadwick, O. Otenko
• Keywords: Authorisation Infrastructure, Distributed And Parallel Computing, EGC 2005, Fine Grained Control, Grid