Skip to main content

Experiences of Applying Advanced Grid Authorisation Infrastructures

Sinnott, Richard O. and Stell, A.J. and Chadwick, David W. and Otenko, O. (2005) Experiences of Applying Advanced Grid Authorisation Infrastructures. In: Advances in Grid Computing - EGC 2005 European Grid Conference. Lecture Notes in Computer Science . Springer, Berlin, Germany, pp. 265-274. ISBN 978-3-540-26918-2. E-ISBN 978-3-540-32036-4. (doi:10.1007/11508380_28)


The widespread acceptance and uptake of Grid technology can only be achieved if it can be ensured that the security mechanisms needed to support Grid based collaborations are at least as strong as local security mechanisms. The predominant way in which security is currently addressed in the Grid community is through Public Key Infrastructures (PKI) to support authentication. Whilst PKIs address user identity issues, authentication does not provide fine grained control over what users are allowed to do on remote resources (authorisation). The Grid community have put forward numerous software proposals for authorisation infrastructures such as AKENTI [1], CAS [2], CARDEA [3], GSI [4], PERMIS [5,6,7] and VOMS [8,9]. It is clear that for the foreseeable future a collection of solutions will be the norm. To address this, the Global Grid Forum (GGF) have proposed a generic SAML based authorisation API which in principle should allow for fine grained control for authorised access to any Grid service. Experiences in applying and stress testing this API from a variety of different application domains are essential to give insight into the practical aspects of large scale usage of authorisation infrastructures. This paper presents experiences from the DTI funded BRIDGES project [10] and the JISC funded DyVOSE project [11] in using this API with Globus version 3.3 [12] and the PERMIS authorisation infrastructure.

Item Type: Book section
DOI/Identification number: 10.1007/11508380_28
Additional information: To appear
Uncontrolled keywords: Grid Service, Policy Decision Point, Globus Toolkit, Policy Enforcement Poin,t Grid Community
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,
Divisions: Faculties > Sciences > School of Computing > Security Group
Faculties > Sciences > School of Computing > Systems Architecture Group
Depositing User: Mark Wheadon
Date Deposited: 24 Nov 2008 18:03 UTC
Last Modified: 23 Jan 2020 04:02 UTC
Resource URI: (The current URI for this page, for reference purposes)
Chadwick, David W.:
  • Depositors only (login required):


Downloads per month over past year