Security and Policy for Group Collaboration

Foster, Ian ; Kesselman, Carl

University of Southern California

关键词: Security, Policy, Group Collaboration;    Distribution;    Technology Transfer Security, Policy, Group Collaboration;    Security;    99 General And Miscellaneous//Mathematics, Computing, And Information Science;   

DOI  :  10.2172/888467
RP-ID  :  DOE/ER/25463-1
RP-ID  :  FC02-01ER25463
RP-ID  :  888467

美国|英语

来源: UNT Digital Library

【 摘 要 】

“Security and Policy for Group Collaboration” was a Collaboratory Middleware research project aimed at providing the fundamental security and policy infrastructure required to support the creation and operation of distributed, computationally enabled collaborations. The project developed infrastructure that exploits innovative new techniques to address challenging issues of scale, dynamics, distribution, and role. To reduce greatly the cost of adding new members to a collaboration, we developed and evaluated new techniques for creating and managing credentials based on public key certificates, including support for online certificate generation, online certificate repositories, and support for multiple certificate authorities. To facilitate the integration of new resources into a collaboration, we improved significantly the integration of local security environments. To make it easy to create and change the role and associated privileges of both resources and participants of collaboration, we developed community wide authorization services that provide distributed, scalable means for specifying policy. These services make it possible for the delegation of capability from the community to a specific user, class of user or resource. Finally, we instantiated our research results into a framework that makes it useable to a wide range of collaborative tools. The resulting mechanisms and software have been widely adopted within DOE projects and in many other scientific projects. The widespread adoption of our Globus Toolkit technology has provided, and continues to provide, a natural dissemination and technology transfer vehicle for our results.