A Framework for Managing Access of Large-Scale Distributed Resources in a Collaborative Platform

Data Science Journal

Su Chen¹  Feng Gao¹  Tiejian Luo¹  Jinliang Song¹  Wei Liu¹ 

[1] College of Information Science and Engineering, Graduate University of Chinese Academy of Sciences

关键词: Federation;    e-Science;    Identity and Privilege Management;    Access Control;    Collaboration;   

DOI  :  10.2481/dsj.7.137

学科分类：计算机科学（综合）

来源: Ubiquity Press Ltd.

【 摘 要 】

References(26)In an e-Science environment, large-scale distributed resources in autonomous domains are aggregated by unified collaborative platforms to support scientific research across organizational boundaries. In order to enhance the scalability of access management, an integrated approach for decentralizing the task from resource owners to administrators on the platform is needed. We propose an extensible access management framework to meet this requirement by supporting an administrative delegation policy. This feature allows administrators on the platform to make new policies based on the original policies made by resources owners. An access protocol that merges SAML and XACML is also included in the framework. It defines how distributed parties operate with each other to make decentralized authorization decisions.

【 授权许可】

Unknown