Using SAML-based VOMS for authorization within web services-based UNICORE grids

Authors:
Valerio Venturi;Morris Riedel;Shiraz Memon;Shahbaz Memon;Federico Stagni;Bernd Schuller;Daniel Mallmann;Bastian Tweddell;Alberto Gianoli;Sven Van Den Berghe;David Snelling;Achim Streit
Affiliations:
National Institute of Nuclear Physics, Bologna, Italy;Forschungszentrum Juelich, Juelich, Germany;Forschungszentrum Juelich, Juelich, Germany;Forschungszentrum Juelich, Juelich, Germany;National Institute of Nuclear Physics, Bologna, Italy;Forschungszentrum Juelich, Juelich, Germany;Forschungszentrum Juelich, Juelich, Germany;Forschungszentrum Juelich, Juelich, Germany;National Institute of Nuclear Physics, Bologna, Italy;Fujitsu Laboratories of Europe, London, UK;Fujitsu Laboratories of Europe, London, UK;Forschungszentrum Juelich, Juelich, Germany
Venue:
Euro-Par'07 Proceedings of the 2007 conference on Parallel processing
Year:
2007

Citing 3
Cited 3

The Anatomy of the Grid: Enabling Scalable Virtual Organizations

International Journal of High Performance Computing Applications
Design and evaluation of a collaborative online visualization and steering framework implementation for computational grids

GRID '07 Proceedings of the 8th IEEE/ACM International Conference on Grid Computing
From gridmap-file to VOMS: managing authorization in a Grid environment

Future Generation Computer Systems - Special issue: High-speed networks and services for data-intensive grids: The DataTAG project

A secure collaboration service for dynamic virtual organizations

Information Sciences: an International Journal
A standards-based interoperable single sign-on framework in ARC Grid middleware

Journal of Network and Computer Applications
A portable interceptor mechanism for SOAP frameworks

Computer Standards & Interfaces

Quantified Score

Hi-index	0.00

Visualization

Abstract

In recent years, the Virtual Organization Membership Service (VOMS) emerged within Grid infrastructures providing dynamic, fine-grained, access control needed to enable resource sharing across Virtual Organization (VOs). VOMS allows to manage authorization information in a VO scope to enforce agreements established between VOs and resource owners. VOMS is used for authorization in the EGEE and OSG infrastructures and is a core component of the respective middleware stacks gLite and VDT. While a module for supporting VOMS is also available as part of the authorization service of the Globus Toolkit, there is currently no support for VO-level authorization within the new Web services-based UNICORE 6. This paper describes the evolution of VOMS towards an open standard compliant service based on the Security Assertion Markup Language (SAML), which in turn provides mechanisms to fill the VO-level authorization service gap within Web service-based UNICORE Grids. In addition, the SAML-based VOMS allows for cross middleware VO management through open standards.