The PRIMA Grid Authorization System
The PRIMA Grid Authorization System
复制标题
PRIMA 电网授权系统
DOI：
10.1007/s10723-004-5408-y
复制
发表时间：
2004
影响因子：
5.5
通讯作者：
D. Kafura
中科院分区：
文献类型：
--
作者：
M. Lorch;D. Kafura
PRIMA是一个用于特权管理和授权的系统，提供了增强的网格安全服务。这些服务的需求来自使用场景，并支持网格用户的调查。通过三种机制的组合来满足增加灵活性、增加表现力和更精确执行的需求：（1）使用安全的细粒度特权，代表网格资源的外部化访问权限，网格用户可以自由地创建、共享和使用这些资源;（2）为每个请求生成的动态策略，其将请求的用户提供的特权与资源的访问控制策略相结合;以及（3）由资源的本机操作系统强制执行并且支持遗留应用的为每个请求专门提供的动态执行环境。PRIMA是Globus Toolkit Grid中间件的扩展。
PRIMA, a system forPRIvilegeManagement andAuthorization, provides enhanced Grid security services. The requirements for these services are derived from usage scenarios and supported by a survey of Grid users. The requirements for added flexibility, increased expressiveness, and more precise enforcement are met by a combination of three mechanisms: (1) use of secure, fine-grained privileges representing externalized access rights for Grid resources that can be freely created, shared, and employed by Grid users; (2) a dynamic policy generated for each request combining the request’s user-provided privileges with the resource’s access control policy; and (3) dynamic execution environments specially provisioned for each request that are enforced by the resource’s native operating system and which support legacy applications. PRIMA has been implemented as an extension of the Globus Toolkit Grid middleware.