Authorization through trust chains in ad hoc grids

ABSTRACT

Secure environment is a top-priority for all the forms of grid computing. To establish trust, traditional grids use various methods, mostly centrally oriented ones, such as certification authorities, VO management servers or credentials pools. Ad hoc grids are characterized by the absence of a central trust authority; therefore collaborating entities must establish and maintain a trust relationship among themselves.

The paper presents a short overview of ad hoc grids, the definitions as well as authentication and authorization mechanisms of the environment. We design a proposal of an authorization mechanism for faster and easier formation of virtual organizations in ad hoc grid based on SPKI delegation chains where the delegation chains act as trust chains, even if they do not refer to target users.

REFERENCES

• 1: The globus toolkit. http://www-unix.globus.org/toolkit/.
• 2: K. Amin, G. von Laszewski, and A. R. Mikler. Hot service deployment in an ad hoc grid environment. Proc. of the IEEE 12th Int. Conference on Advanced Computing and Communications, 2004.
• 3: K. Amin , G. von Laszewski , M. Sosonkin , A. R. Mikler , M. Hategan, Ad Hoc Grid Security Infrastructure, Proceedings of the 6th IEEE/ACM International Workshop on Grid Computing, p.69-76, November 13-14, 2005 [doi>10.1109/GRID.2005.1542726]
• 4: T. Aura and C. Ellison. Privacy and accountability in certificate systems. In Research Report A61. Helsinki University of Technology, April 2000.
• 5: C. Ellison , B. Frantz , B. Lampson , R. Rivest , B. Thomas , T. Ylonen, SPKI Certificate Theory, RFC Editor, 1999
• 6: Thomas Friese , Matthew Smith , Bernd Freisleben, Hot service deployment in an ad hoc grid environment, Proceedings of the 2nd international conference on Service oriented computing, November 15-19, 2004, New York, NY, USA [doi>10.1145/1035167.1035179]
• 7: José de R. P. Braga, Jr , Alexandre C. T. Vidal , Fabio Kon , Marcelo Finger, Trust in large-scale computational grids: an SPKI/SDSI extension for representing opinion, Proceedings of the 4th international workshop on Middleware for grid computing, November 27-December 01, 2006, Melbourne, Australia [doi>10.1145/1186675.1186683]
• 8: A. Josang, E. Gray, and M. Kinateder. Analysing topologies of transitive trust. Proc. of the Workshop of Formal Aspects of Security and Trust, 2003.
• 9: F. Kerschbaum, J. Haller, Y. Karabulut, and P. Robinson. Pathtrust: A trust-based reputation service for virtual organization formation. In iTrust2006, 4th International Conference on Trust Management, pages 193--205. Springer, 2006.
• 10: Yki Kortesniemi, SPKI Performance and Certificate Chain Reduction, Informatik bewegt: Informatik 2002 - 32. Jahrestagung der Gesellschaft für Informatik e.v. (GI), p.449-454, September 30-October 03, 2002
• 11: Heba Kurdi , Maozhen Li , Hamed Al-Raweshidy, A Classification of Emerging and Traditional Grid Systems, IEEE Distributed Systems Online, v.9 n.3, p.1, March 2008 [doi>10.1109/MDSO.2008.8]
• 12: J. Laganier , P. Vicat-Blanc Primet, HIPernet: A Decentralized Security Infrastructure for Large Scale Grid Environments, Proceedings of the 6th IEEE/ACM International Workshop on Grid Computing, p.140-147, November 13-14, 2005 [doi>10.1109/GRID.2005.1542735]
• 13: Aizhong Lin , Erik Vullings , James Dalziel, A Trust-based Access Control Model for Virtual Organizations, Proceedings of the Fifth International Conference on Grid and Cooperative Computing Workshops, p.557-564, October 21-23, 2006 [doi>10.1109/GCCW.2006.14]
• 14: M. Lorch and D. Kafura. The prima grid authorization system. Journal of Grid Computing, 2(3):279--298, September 2004.
• 15: L. Seitz, J. Pierson, and L. Brunie. Sygn: A certificate based access control in grid environments. Research Report RR-LIRIS-2005-011, 2005.
• 16: R. O. Sinnott , D. W. Chadwick , J. Koetsier , O. Otenko , J. Watt , T. A. Nguyen, Supporting Decentralized, Security Focused Dynamic Virtual Organizations across the Grid, Proceedings of the Second IEEE International Conference on e-Science and Grid Computing, p.22, December 04-06, 2006 [doi>10.1109/E-SCIENCE.2006.132]
• 17: Matthew Smith , Thomas Friese , Bernd Freisleben, Towards a Service-Oriented Ad Hoc Grid, Proceedings of the Third International Symposium on Parallel and Distributed Computing/Third International Workshop on Algorithms, Models and Tools for Parallel Computing on Heterogeneous Networks, p.201-208, July 05-07, 2004
• 18: S. Tuecke, V. Welch, D. Engert, L. Pearlman, and M. Thompson. Internet x.509 public key infrastructure (pki) proxy certificate profile. RFC 3820, June 2004.
• 19: Victoria Ungureanu, Efficient support for enterprise delegation policies, Proceedings of the 2005 ACM symposium on Applied computing, March 13-17, 2005, Santa Fe, New Mexico [doi>10.1145/1066677.1066757]
• 20: Jun Wang , David Del Vecchio , Marty Humphrey, Extending the Security Assertion Markup Language to Support Delegation for Web Services and Grid Services, Proceedings of the IEEE International Conference on Web Services, p.67-74, July 11-15, 2005 [doi>10.1109/ICWS.2005.59]
• 21: S. Zhao, A. Aggarwal, and R. D. Kent. Pki-based authentication mechanisms in grid systems. IEEE Int. Conference on Networking, Architecture, and Storage, pages 83--90, 2007.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Design, Security, Theory

Keywords:
ad hoc grid, authorization, certificate chain, delegation