An Architecture for Authorization in Grids using Shibboleth and VOMS

Author

Groeper, Ralf ; Grimm, Christian ; Piger, Stefan ; Wiebelitz, Jan

Author_Institution

Gottfried Willhelm Leibniz Univ., Hannover

fYear

2007

fDate

28-31 Aug. 2007

Firstpage

367

Lastpage

374

Abstract

Shibboleth-based federations emerge in numerous countries, especially in the academic sector. Leveraging these federations for authentication and authorization purposes in Grid computing is one aim of current research. In this paper an architecture for delivering attributes managed by both, Shibboleth IdPs and VOMS, to Grid resources for authentication and authorization purposes is presented. Special focus lies on linking Web-based Shibboleth federations with the X.509 certificate-based grid security infrastructure by using a short lived certificate service as a trust-proxy between these worlds.

Keywords

authorisation; certification; grid computing; portals; public key cryptography; Shibboleth federation; Web-based portal; X.509 public key certificate; grid authentication; grid authorization architecture; grid computing; grid security infrastructure; short lived certificate service; trust-proxy; virtual organization membership service; Authentication; Authorization; Computer architecture; Current supplies; Grid computing; Joining processes; Personal communication networks; Public key; Resource management; Security;

fLanguage

English

Publisher

ieee

Conference_Titel

Software Engineering and Advanced Applications, 2007. 33rd EUROMICRO Conference on

Conference_Location

Lubeck

ISSN

1089-6503

Print_ISBN

978-0-7695-2977-6

Type

conf

DOI

10.1109/EUROMICRO.2007.15

Filename

4301100