A data grid security system based on shared context

Abstract

Data grid system supports uniform and secure access of heterogeneous distributed data resources across a range of administrative domains, each with its own local security policy. The security challenge has been a focus in a data grid environment. This paper mainly presents GridDaEn's security mechanisms. In addition to the basic authentication and authorization functionality, it provides an integrated security strategy featured by shared context-based secure channel building to leverage security processing efficiency so as to improve interaction performance occurring among multiple domains in GridDaEn. Mean-while, by means of proxy credential single-sign-on across multiple domains can be achieved. Experiments show that this approach can guarantee system security and reliability with great performance enhancement. © IFIP International Federation for Information Processing 2004.