Authorisation Infrastructure for On-Demand Grid and Network Resource Provisioning [chapter]

Yuri Demchenko, Mihai Cristea, Cees de Laat, Evangelos Haleplidis
2010 Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering  
The paper presents the Authorisation (AuthZ) infrastructure for combined multidomain on-demand Grid and network resource provisioning which we refer to as the Complex Resource Provisioning (CRP). The proposed CRP model provides a common abstraction of the resource provisioning process and is used as a basis for defining the major AuthZ mechanisms and components that extend the generic AAA AuthZ framework to support CRP (GAAA-CRP), in particular using XML-based AuthZ tickets and tokens to
more » ... access control and signalling during different CRP stages. The proposed GAAA-CRP framework is implemented as the GAAA Toolkit pluggable library and allows integration with the Grid and network service and control plane middleware. The proposed authorisation infrastructure allows using in-band binary tokens to extend network access control granularity to data plane and support binding applications to dataflows. The paper discusses the use of the ForCES network management model to achieve interoperability with the network control plane and define the GAAA-NRP interfaces to network control plane. This research was conducted as a part of the EU Phosphorus project.
doi:10.1007/978-3-642-11733-6_2 fatcat:ifszmwdjkrgltbc2cj2nebejym