Dynamic Security Context Management in Grid-Based Applications

This paper summarizes ongoing research and recent results on the development of flexible access control infrastructure for complex resource provisioning in Grid-based collaborative applications and on-demand network services provisioning. The paper analyses the general access control model for Grid based applications and discusses what mechanisms can be used for expressing and handling dynamic domain or process/workflow related security context. Suggestions are given what specific functionality should be added to the Grid-oriented authorization frameworks to handle such dynamic security context. As an example, the paper explains how such functionality can be achieved in the GAAA AuthoriZation framework (GAAA-AuthZ) and GAAA toolkit.