DMCA
Policydriven negotiation for authorization in the semantic grid
| Venue: | In IEEE International Workshop on Policies for Distributed |
| Citations: | 1 - 0 self |
BibTeX
@INPROCEEDINGS{Constandache_policydrivennegotiation,
author = {Ionut Constandache and Daniel Olmedilla and Frank Siebenlist and Wolfgang Nejdl},
title = {Policydriven negotiation for authorization in the semantic grid},
booktitle = {In IEEE International Workshop on Policies for Distributed},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
As in many Grid Services deployments the clients and servers reside in different administrative domains, there is both a requirement to discover each other’s authorization policy in order to be able to present the right assertions that allow access, as well as to reveal as little as possible of the access policy details to unauthorized parties. This paper describes a mechanism where the client and servers are semantically annotated with policies that protect their resources. These annotations specify both constraints and capabilities, which are used during a negotiation to reason about and to communicate the need to see certain credentials from the other party, and to determine whether requested credentials can be obtained and revealed. The end result of the negotiation is a state where either both parties have satisfied their policy constraints for a subsequent interaction, or where such interaction is disallowed by either or both. Furthermore, the implementation of a prototype is discussed that is based on the PEERTRUST policy language and a reasoning engine, which are integrated in the webservices runtime of the Globus Toolkit. The negotiation process is facilitated through the implementation of WSRF-compliant service interfaces for the protocol message exchanges.
Keyphrases
policydriven negotiation semantic grid unauthorized party webservices runtime certain credential requested credential right assertion end result authorization policy protocol message exchange subsequent interaction wsrf-compliant service interface many grid service policy constraint access policy detail reasoning engine negotiation process globus toolkit different administrative domain peertrust policy language
