Title :
An Architecture for Authorization in Grids using Shibboleth and VOMS
Author :
Groeper, Ralf ; Grimm, Christian ; Piger, Stefan ; Wiebelitz, Jan
Author_Institution :
Gottfried Willhelm Leibniz Univ., Hannover
Abstract :
Shibboleth-based federations emerge in numerous countries, especially in the academic sector. Leveraging these federations for authentication and authorization purposes in Grid computing is one aim of current research. In this paper an architecture for delivering attributes managed by both, Shibboleth IdPs and VOMS, to Grid resources for authentication and authorization purposes is presented. Special focus lies on linking Web-based Shibboleth federations with the X.509 certificate-based grid security infrastructure by using a short lived certificate service as a trust-proxy between these worlds.
Keywords :
authorisation; certification; grid computing; portals; public key cryptography; Shibboleth federation; Web-based portal; X.509 public key certificate; grid authentication; grid authorization architecture; grid computing; grid security infrastructure; short lived certificate service; trust-proxy; virtual organization membership service; Authentication; Authorization; Computer architecture; Current supplies; Grid computing; Joining processes; Personal communication networks; Public key; Resource management; Security;
Conference_Titel :
Software Engineering and Advanced Applications, 2007. 33rd EUROMICRO Conference on
Conference_Location :
Lubeck
Print_ISBN :
978-0-7695-2977-6
DOI :
10.1109/EUROMICRO.2007.15