NDLI: Toward an On-Demand Restricted Delegation Mechanism for Grids

Content Provider	IEEE Xplore Digital Library
Author	Ahsant, M. Basney, J. Mulmo, O. Lee, A.J. Johnsson, L.
Copyright Year	2006
Description	Author affiliation: Center for Parallel Comput., R. Inst. of Technol., Stockholm (Ahsant, M.)
Abstract	Grids are intended to enable cross-organizational interactions which makes grid security a challenging and non-trivial issue. In grids, delegation is a key facility that can be used to authenticate and authorize requests on behalf of disconnected users. In current grid systems there is a tradeoff between flexibility and security in the context of delegation. Applications must choose between limited or full delegation: on one hand, delegating a restricted set of rights reduces exposure to attack but also limits the flexibility/dynamism of the application; on the other hand, delegating all rights provides maximum flexibility but increases exposure. In this paper, we propose an on-demand restricted delegation mechanism, aimed at addressing the shortcomings of current delegation mechanisms by providing restricted delegation in a flexible fashion as needed for grid applications. This mechanism provides an ontology-based solution for tackling one the most challenging issues in security systems, which is the principle of least privileges. It utilizes a callback mechanism, which allows on-demand provisioning of delegated credentials in addition to observing, screening, and auditing delegated rights at runtime. This mechanism provides support for generating delegation credentials with a very limited and well-defined range of capabilities or policies, where a delegator is able to grant a delegatee a set of restricted and limited rights, implicitly or explicitly
Starting Page	152
Ending Page	159
File Size	236044
Page Count	8
File Format	PDF
ISBN	142440343X
DOI	10.1109/ICGRID.2006.311010
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2006-09-28
Publisher Place	Spain
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Grid computing Authorization Concurrent computing Application software Computer science Computer security Ontologies Runtime Information technology Disaster management
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Workflows in Dynamic and Restricted Delegation

Dynamic, context-aware, least-privilege grid delegation

Toward an On-Demand Restricted Delegation (2006)

A Study on the Mechanisms of Policy-Based Grid Authorization

A Comprehensive Approach to Self-Restricted Delegation of Rights in Grids

An Approach for Integrating Trust Information Model

Cross-Domain Grid Authentication and Authorization Scheme Based on Trust Management and Delegation

Dynamic delegation approach for access control in grids

An Ontology-Based Virtualization Access Control Framework for Grid Service

Toward an On-Demand Restricted Delegation Mechanism for Grids

Similar Documents

Workflows in Dynamic and Restricted Delegation

Dynamic, context-aware, least-privilege grid delegation

Toward an On-Demand Restricted Delegation (2006)

A Study on the Mechanisms of Policy-Based Grid Authorization

A Comprehensive Approach to Self-Restricted Delegation of Rights in Grids

An Approach for Integrating Trust Information Model

Cross-Domain Grid Authentication and Authorization Scheme Based on Trust Management and Delegation

Dynamic delegation approach for access control in grids

An Ontology-Based Virtualization Access Control Framework for Grid Service

Toward an On-Demand Restricted Delegation Mechanism for Grids