Using trust for restricted delegation in grid environments

Authors:
Wenbao Jiang;Chen Li;Shuang Hao;Yiqi Dai
Affiliations:
Department of Information System, Beijing Information Technology Institute, Beijing, China;Department of Information System, Beijing Information Technology Institute, Beijing, China;Department of Computer Science and Technology, Tsinghua University, China;Department of Computer Science and Technology, Tsinghua University, China
Venue:
ISPEC'05 Proceedings of the First international conference on Information Security Practice and Experience
Year:
2005

Citing 5
Cited 1

A security architecture for computational grids

CCS '98 Proceedings of the 5th ACM conference on Computer and communications security
Toward Realizable Restricted Delegation in Computational Grids

HPCN Europe 2001 Proceedings of the 9th International Conference on High-Performance Computing and Networking
Supporting Trust in Virtual Communities

HICSS '00 Proceedings of the 33rd Hawaii International Conference on System Sciences-Volume 6 - Volume 6
A Community Authorization Service for Group Collaboration

POLICY '02 Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks (POLICY'02)
The Anatomy of the Grid: Enabling Scalable Virtual Organizations

International Journal of High Performance Computing Applications

A framework for modeling restricted delegation in service oriented architecture

TrustBus'06 Proceedings of the Third international conference on Trust, Privacy, and Security in Digital Business

Quantified Score

Hi-index	0.00

Visualization

Abstract

Delegation is an important tool for authorization in large distributed environments. However, current delegation mechanisms used in emerging Grids have problems to allow for flexible and secure delegation. This paper presents a framework to realize restricted delegation using a specific attribute certificate with trust value in grid environments. The framework employs attribute certificates to convey rights separately from identity certificates used for authentication, and enables chained delegations by using attribute certificate chains. In the framework the verifier can enforce securely authorization with delegation by checking the trust values of AC chains, and judge if a delegation is a trusted delegation by evaluating the reputation value of the delegation chain. The paper discusses the way of computing trust and reputation for delegation, and describes some details of delegation, including the creation of delegation credential and the chained delegation protocol.