Attributes and VOs: extending the UNICORE authorisation capabilities

  • Authors:
  • Arash Faroughi;Roozbeh Faroughi;Philipp Wieder;Wolfgang Ziegler

  • Affiliations:
  • Fraunhofer Institute SCAI, Department of Bioinformatics, Sankt Augustin, Germany;Fraunhofer Institute SCAI, Department of Bioinformatics, Sankt Augustin, Germany;Central Institute for Applied Mathematics, Research Centre Jülich, Jülich, Germany;Fraunhofer Institute SCAI, Department of Bioinformatics, Sankt Augustin, Germany

  • Venue:
  • Euro-Par'07 Proceedings of the 2007 conference on Parallel processing
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Reliable authentication and authorisation are crucial for both service providers and their customers, where the former want to protect their resources from unauthorised access and fraudulent use while their customers want to be sure unauthorised access to their data is prevented. In Grid environments Virtual Organisations (VO) have been adopted as a means to organise and control access to resources and data based on roles that are assigned to users. Moreover, attribute based authorisation has emerged providing a decentralised approach with better scalability. Up to now UNICORE authentication and authorisation is based on X.509 certificates only. In this paper we will present two approaches to integrate both role or attribute based authorisation using VOMS and attribute based authorisation using Shibboleth into UNICORE.