Using Workflow for Dynamic Security Context Management in Grid-based Applications

This paper presents ongoing research and current results on the development of flexible access control infrastructures for complex resource provisioning in Grid-based collaborative applications and on-demand network services provisioning. We investigate the use of workflow concepts for the required orchestration of multiple Grid resources and/or services across multiple administrative and security domains. In particular, workflow execution and management tools can be used to track security context changes that are dependent on the application domain, execution stage defined policies, or user and/or service attributes. The paper discusses what specific functionality should be added to Grid-oriented authorization frameworks to handle such dynamic service-related security contexts. As an example, the paper explains how such functionality can be achieved in the GAAA Authorization framework (GAAA-AuthZ) and GAAA toolkit. Suggestions are given about integration with the Globus Toolkit'...

• Type: Journal
• Year: 2006
• Where: GRID
• Authors: Yuri Demchenko, Leon Gommans, Cees de Laat, Arie Taal, Alfred Wan, Olle Mulmo
• Keywords: Authorization Framework, Distributed And Parallel Computing, GRID 2006, Paper, Security Contexts