Abstract
Users in grid computing environments typically interact with a lot of computing resource, storage resources and I/O devices. Different users are allowed to access different subsets of services, resources. These permissions should be executed correctly to guarantee the security of grid computing.
In ChinaGrid Support Platform (CGSP), there are large numbers of users, services, and resources. To ensure the security of CGSP, we build a user management mechanism to identify every entity, assign different rights based on user role and the properties of services and resources to ensure containers, services and resources in CGSP being used in a right way, and return the results to the correct user. We also consider the access control of files. These are designed in a uniform authorization management mechanism in CGSP.
This paper is supported by ChinaGrid project from Ministry of Education, National Science Foundation of China under grant 60125208 and 90412010.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
CGSP Working Group, Design Specification of ChinaGrid Support Platform. Tsinghua University Press, Beijing (2004)
ChinaGrid, http://www.chinagrid.edu.cn
ChinaGrid Support Platform, http://www.chinagrid.edu.cn/CGSP
Deelman, E., Singh, G., Atkinson, M.P., Chervenak, A., Hong, N.P.C., Kesselman, C., Patil, S., Pearlman, L., Su, M.: Grid-Based Metadata Services. In: Proceedings of 16th International Conference on Scientific and Statistical Database Management, SSDBM 2004 (June 2004)
Globous Toolkits, http://www.globus.org
Jin, H.: ChinaGrid: Making grid computing a reality. In: Chen, Z., Chen, H., Miao, Q., Fu, Y., Fox, E., Lim, E.-p. (eds.) ICADL 2004. LNCS, vol. 3334, pp. 13–24. Springer, Heidelberg (2004)
Foster, I., Kesselman, C.: Globus: A Metacomputing Infrastructure Toolkit. International J. Supercomputer Application 11(2), 115–128 (1997)
Foster, I., Kesselman, C., Tuecke, S.: The Anatomy of the Grid: Enabling Scalable Virtual Organization. International J. Supercomputer Applications 15(3) (2001)
Foster, I., Kesselman, C., Nick, J., Tuecke, S.: The Physiology of the Grid: An Open Grid Services Architecture for Distributed Systems Integration. In: Open Grid Service Infrastructure WG, Global Grid Forum, June 22 (2002)
Internet X.509 Public Key Infrastructure Certificate and CRL Profile, http://www.ietf.org/rfc/rfc2459.txt
Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile, http://www.ietf.org/rfc/rfc3820.txt
Romberg, M.: The UNICORE Architecture: Seamless Access to Distributed Resources. In: Proceedings of The Eighth IEEE International Symposium on High Performance Distributed Computing, Washington (1999)
MyProxy, http://grid.ncsa.uiuc.edu/myproxy/
Open Grid Services Architecture (OGSA), https://forge.gridforum.org/projects/ogsa-wg , http://www.globus.org/ogsa/
Haubold, S., Mix, H., Nagel, W.E., Romberg, M.: The unicore grid and its options for performance analysis. In: Performance Analysis and Grid Computing, pp. 275–288. Kluwer Academic Publishers, Dordrecht (2004)
The TLS Protocol Version 1.0, http://www.ietf.org/rfc/rfc2246.txt
Web Service Resource Framework (WSRF), http://www.globus.org/wsrf/
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Jin, H., Yi, C., Wu, S., Qi, L., Zou, D. (2005). Uniform Authorization Management in ChinaGrid Support Platform. In: Chen, G., Pan, Y., Guo, M., Lu, J. (eds) Parallel and Distributed Processing and Applications - ISPA 2005 Workshops. ISPA 2005. Lecture Notes in Computer Science, vol 3759. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11576259_25
Download citation
DOI: https://doi.org/10.1007/11576259_25
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-29770-3
Online ISBN: 978-3-540-32115-6
eBook Packages: Computer ScienceComputer Science (R0)