Abstract
The grid has emerged as a platform that enables to put in place an inter-organizational shared space known as Virtual Organization. The Virtual Organization (VO) encompasses users and resources supplied by the different partners for achieving the VO’s creation goal. Though many works offer solutions to manage a VO, the dynamic, on the fly creation of virtual organizations is still a challenge. Dynamic creation of VOs is associated with the automated generation of access control policy to trace its boundaries, specify the different partners’ rights within it and assure its management during its life time. In this paper, we propose an OrBAC (Organization Based Access Control model) based Virtual Organization model which serves as a corner stone in the VO creation automated process. OrBAC framework specifies the users’ access permissions/interdiction to the VO resources, where its administration model AdOrBAC flexibly models the multi-stakeholder administration in the Grid.
This is a preview of subscription content, log in via an institution to check access.
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Nasser, B., Benzekri, A., Laborde, R., Grasset, F., Barrère, F.: Access Control Model for Grid Virtual Organizations. In: to appear in ICEIS conference (2005)
Grid Support for Ubiquitous Computing Research Group Global Grid Forum, http://ubigrid.lancs.ac.uk/ubicomp_rg_charter.html
Fedak, G., Germain, C., Neri, V., Cappello, F.: XtremWeb: A Generic Global Computing System. In: CCGRID2001, workshop on Global Computing on Personal Devices. IEEE Press, Los Alamitos (2001)
Rajasekar, A., Wan, M., Moore, R., Schroeder, W., Kremenek, G., Jagatheesan, A., Cowart, C., Zhu, B., Chen, S.-Y., Olschanowsky, R.: Storage Resource Broker – Managing Distributed Data in a Grid. Available online: http://www.npaci.edu/DICE/Pubs/CSI-paper-sent.doc
Foster, I., Kesselman, C., Tuecke, S.: The Anatomy of the Grid: Enabling Scalable Virtual Organizations. International J. Supercomputer Applications 15(3) (2001)
Cannon, S., Chan, S., Olson, D., Tull, C., Welch, V., Pearlman, L.: Using CAS to manage Role based VO sub-groups. In: CHEP, La Jolla, California (2003), available online http://www.globus.org/security/CAS/Papers/CAS-group-CHEP03.pdf
Alfieri, R., Cecchini, R., Ciaschini, V., dell’Agnello, L., Frohner, A., Gianoli, A., Lörentey, K., Spataro, F.: VOMS, an authorization system for virtual organizations. In: DataGrid Project (2003), available online: http://grid-auth.infn.it/docs/VOMS-Santiago.pdf
Djordjevic, I., Dimitrakos, T., Phillips, C.: An architecture for dynamic security perimeters of virtual collaborative networks. In: Proc. 9th IEEE/IFIP Network Operations and Management Symposium (NOMS 2004). IEEE-CS, Los Alamitos (2004)
Freudenthal, E., Pesin, T., Port, L., Keenan, E., Karamcheti, V.: dRBAC: Distributed Role-based Access Control for Dynamic Coalition Environments
Samarati, P., De Capitani di Vimercati, S.: Access Control: Policies, Models, and Mechanisms.
Sandhu, R., Coyne, E., Feinstein, H., Youman, C.: Role-Based Access Control Models. IEEE Computer 29(2), 38–47 (1996)
El Kalam, A.A., El Baida, R., Balbiani, P., Benferhat, S., Cuppens, F., Deswartes, Y., Miege, A., Saurel, C., Trouessin, G.: Organization Based Access Control, available online: http://www.rennes.enst-bretagne.fr/~fcuppens/articles/Or-BAC.pdf
Sandhu, R., Munawer, Q.: The ARBAC99 Model for Administration of Roles. In: Proceeding of the 15th Annual Computer Security Applications Conference (ACSAC 1999), Phoenix, Arizona, December 6-10, pp. 229–241. IEEE Computer Society, Los Alamitos (1999)
Cuppens, F., Miege, A.: Ad-ORBAC: An Administration Model forOr-BAC. Available online: http://www.rennes.enst-bretagne.fr/~fcuppens/articles/csse04.pdf
Welch, V., Foster, I., Kesselman, C., Mulmo, O., Pearlman, L., Tuecke, S., Gawor, J., Meder, S., Siebenlist, F.: X.509 proxy certificate for dynamic delegation. In: Proceedings of the 3rd Annual PKI R&D Workshop (2004)
Czajkowski, K., Foster, I., Kesselman, C., Sander, V., Tuecke, S.: SNAP: A Protocol for Negotiation of Service Level Agreements and Coordinated Resource Management in Distributed Systems. In: Feitelson, D.G., Rudolph, L., Schwiegelshohn, U. (eds.) JSSPP 2002. LNCS, vol. 2537, pp. 153–183. Springer, Heidelberg (2002), Available online: http://www-unix.mcs.anl.gov/~schopf/ggf-sched/GGF5/sched-GRAAP.3.pdf
Foster, I., Kesselman, C.: Globus: A Metacomputing Infrastructure Toolkit. Intl J. Supercomputer Applications 11(2), 115–128 (1997)
Cohen, E., Thomas, R., Winsborough, W., Shands, D.: Models for coalition based access control (CBAC)
Nayak, N., Chao, T., Li, J., Mihaeli, J., Das, R., Derebail, A., Hoo, J.S.: Role of Technology in Enabling Dynamic Virtual Enterprises, Available online: http://cersi.luiss.it/oesseo2001/papers/13.pdf
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Nasser, B., Laborde, R., Benzekri, A., Barrère, F., Kamel, M. (2005). Access Control Model for Inter-organizational Grid Virtual Organizations. In: Meersman, R., Tari, Z., Herrero, P. (eds) On the Move to Meaningful Internet Systems 2005: OTM 2005 Workshops. OTM 2005. Lecture Notes in Computer Science, vol 3762. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11575863_73
Download citation
DOI: https://doi.org/10.1007/11575863_73
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-29739-0
Online ISBN: 978-3-540-32132-3
eBook Packages: Computer ScienceComputer Science (R0)