A Security Architecture for Computational Grids-英文文献.pdf

A Security Architecture for Computational Grids∗ Ian Foster1 Carl Kesselman2 Gene Tsudik2 Steven Tuecke1 1 Mathematics and Computer Science 2 Information Sciences Institute Argonne National Laboratory University of Southern California Argonne, IL 60439 Marina del Rey, CA 90292 {foster,tuecke}@ {carl,gts}@ Abstract that collectively span many administrative domains. Fur- thermore, the dynamic nature of the grid can make it im- State-of-the-art and emerging scientific applications require possible to establish trust relationships between sites prior fast access to large quantities of data and commensurately to application execution. Finally, the interdomain security fast computational resources. Both resources and data are solutions used for grids must be able to interoperate with, often distributed in a wide-area network with components rather than replace, the diverse intradomain access control administered locally and independently. Computations may technologies inevitably encountered in individual domains. involve hundreds of processes that must be able to acquire re- In this paper, we describe new techniques that overcome sources dynamically and communicate efficiently. This pa- many of the cited difficulties. We propose a security pol- per analyzes the unique security requirement