Using SAML Callout to Realize Access Restriction for Geospatial Grid Services

摘要：

It is currently one of the hottest research areas of geospatial informatics to integrate OGC specifications with Globus-based Grid technology to develop geospatial Grid. In Grid systems, the security of resources outsourced from multiple organizations is very critical. However, the authorization mechanisms provided in the Globus Toolkit cannot realize the fine-grained and geospatial access control requirements of geospatial Grid Services. In this paper, we employ the GeoXACML specification to define geospatial access control policies and rules. In addition, we take advantage of the SAML Callout mechanism in the Globus Toolkit to resort to the thirdparty authorization service to secure the access to geospatial Grid services. The outer authorization service makes access decisions against GeoXACML-formatted policies and rules, which are defined according to the specific access control requirements. The system reference framework is also proposed and its components and control flow are explained.

关键词： Grid Access Control Geospatial Semantics GeoXACM SAML Callout PERMIS

作者: Jiayuan LIN Yu FANG Bin CHEN

作者单位: Institute of Remote Sensing and GIS Peking University Beijing, P.R.China

会议类型: 国际会议

会议名称: 第七届网格与协同计算国际会议(Seventh International Conference on Grid and Cooperative Computing GCC 2008)

会议地点: 深圳

会议语种:英文

页码: 583-588

在线出版日期: 2008-10-24（万方平台首次上网日期，不代表论文的发表时间）