Search

In this demonstration, we present Traust, a flexible authorization service for open systems. Traust uses the technique of trust negotiation to map globally meaningful assertions regarding a previously unknown client into security tokens that are meaningful to resources deployed in the Traust service's security domain. This system helps preserve the privacy of both users and the service, while at the same time automating interactions between security domains that would previously have required human intervention (e.g., the establishment of local accounts). We will demonstrate how the Traust service enables the use of trust negotiation to broker access to resources in open systems without requiring changes to protocol standards or applications software. [ABSTRACT FROM AUTHOR]

Grids should not just be facilitating advances in science and engineering; rather they should also be making an impact on our daily lives by enabling sophisticated applications such as new consumer services and support for homeland defense. This is not possible today because the poor grid dependability—which is tolerated by scientific users—would be unacceptable in critical infrastructure applications. This project aims at correcting this problem by devel oping technology that will allow grids to be used to provide services upon which society can depend. Through the Grid Dependability and Survivability Architecture (GDSA) and the Dependability Exchange and Specification Language (DESL), Grids will be engineered both to achieve high dependability and to permit assurance that high dependability has been achieved. [ABSTRACT FROM AUTHOR]

In many ways, the ultimate success of the Grid will be highly dependent on the support for and integration with existing legacy infrastructure such as authentication infrastructure. This paper describes the design and implementation of the integration of Pubcookie, a popular Web-based authentication infrastructure used on campuses, and MyProxy, the on-line credential repository for the Grid. Specifically, we enable a valid Pubcookie credential to be dynamically exchanged for a Grid credential, without requiring the user to re-authenticate. Through this integration, this project makes an important contribution to an overall goal of single sign-on and more specifically the ability to "authenticate locally and act globally". [ABSTRACT FROM AUTHOR]

Scalable group key management solutions are crucial for supporting Internet applications that are based on a group communication model. Many solutions have been proposed and of these the most efficient and scalable ones are based on logical key hierarchies (LKH) with symmetric keys organized in a tree. However, these solutions centralize trust in the group controller and make it an attractive attack target for access to communication keys for all groups supported by the controller. In this paper we propose a novel group key management approach, which uses a partially trusted controller that does not have access to communication keys and yet provides the same level of efficiency and scalability as LKH schemes. For this we develop a new public-key encryption scheme, which is based on El Gamal, and we show that the scheme is as secure as El Gamal. [ABSTRACT FROM AUTHOR]