A Framework for Revocation of Proxy Certificates in a Grid

Proxy certificates (PCs) are essential in grid security infrastructure (GSI), but their revocation still remains problematic in grid environments. The mechanisms for normal end entity certificates (EEC) revocation need to be reconsidered or revised for PC revocation in grids. In this paper, we present a new framework that addresses the PC revocation problem based on MyProxy - the online credential repository - in Globus toolkit. The framework has been implemented to prove its feasibility. The implementation is light-weight and has been integrated into the Globus architecture. We consider this as an important contribution to Globus and MyProxy and of significance to users and providers of critical grid services.