A New Access Control Framework in Grid Environments
Hakimeh Alemi Baktash, MohammadBagher Karimi, MohammadReza Meybodi, Asgarali Bouyer
Journal of Networking Technology, Vol. 2, No. 1, 2011.
DOI: 
Link: http://www.dline.info/jnt/fulltext/v1n3/5.pdf
Abstract:
In recent years, the complexity of dynamic and collaborative computing environments in Grid is increasingand hence the access control has become a critical factor. In the earlier works, many approaches have been proposed ingrid environment for scalable and efficient authorizations that are either VO-centric or Resource-centric. While analyzingthe different kinds of proposed authorization systems, we observed that the VO-level and Resource-level authorizationsystems look at two different aspects of the grid authorization. Indeed, they complement each other, and can be implementedtogether to provide a holistic authorization solution. Hence in this study, we propose a new access control frameworkwhich uses an extended two level RBAC model in Grid computing environments. By separating the administrations ofusers by VO level policies and mapping these policies to resources by resource or service providers, our scheme providesdecentralized, autonomous, and fine-grained security management. The art of this approach is support of high flexibilityin policy configuration, dynamically modifying authorization policies and reducing the cost of policy management.