The MyProxy online credential repository

Abstract

The MyProxy online credential repository has been used by the Grid computing community for over four years for managing security credentials in the Grid public key infrastructure. MyProxy improves usability by giving users access to their credentials over the network using password authentication, allowing users to delegate their credentials via Web browser interfaces to the Grid, and supporting credential renewal for long-running jobs. MyProxy helps administrators secure users' private keys by providing an online service from which users retrieve short-lived credentials without distributing long-lived keys to potentially vulnerable end-systems. This paper describes the MyProxy system and its use. Copyright © 2005 John Wiley & Sons, Ltd.