Key aspects of the UNICORE 6 security model

Authors:
Krzysztof Benedyczak;Piotr Bała;Sven van den Berghe;Roger Menday;Bernd Schuller
Affiliations:
Faculty of Mathematics and Computer Science, Nicolaus Copernicus University, Poland and Interdisciplinary Center for Mathematical and Computational Modelling, Warsaw University, Poland;Faculty of Mathematics and Computer Science, Nicolaus Copernicus University, Poland and Interdisciplinary Center for Mathematical and Computational Modelling, Warsaw University, Poland;Fujitsu Laboratories of Europe, UK;Fujitsu Laboratories of Europe, UK;Jülich Supercomputing Centre, Germany
Venue:
Future Generation Computer Systems
Year:
2011

Citing 5
Cited 2

An Online Credential Repository for the Grid: MyProxy

HPDC '01 Proceedings of the 10th IEEE International Symposium on High Performance Distributed Computing
Extending the Security Assertion Markup Language to Support Delegation for Web Services and Grid Services

ICWS '05 Proceedings of the IEEE International Conference on Web Services
A framework model for grid security

Future Generation Computer Systems
A concept for attribute-based authorization on D-Grid resources

Future Generation Computer Systems
Structure design and test of enterprise security management system with advanced internal security

Future Generation Computer Systems

Seamless access to the PL-Grid e-infrastructure using UNICORE middleware

Building a National Distributed e-Infrastructure - PL-Grid
A Single Sign-On Infrastructure for Science Gateways on a Use Case for Structural Bioinformatics

Journal of Grid Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents the security architecture of the sixth version of the UNICORE grid middleware. The sixth iteration of UNICORE introduced a number of new, security-related solutions which make UNICORE distinguishable from the other grid middleware as Globus, gLite or NorduGrid ARC, and these are presented in this paper. The paper discusses the low level security: users authentication, non-repudiation control and trust delegation. The UNICORE unique approach to the challenge of trust delegation is called explicit trust delegation (ETD); discussion of this constitutes the most significant and extensive part of this paper. ETD is compared with the popular grid security infrastructure (GSI). High level security services (such as authorization services) are not described in this paper.