| | |
Summary: Nepheli: Scalable Decentralized Authorization in Federated
File Services
G. Margaritis A. Hatzieleftheriou N. Mpountouropoulos S. V. Anastasiadis
Department of Computer Science
University of Ioannina
Ioannina 45110, GREECE
{gmargari,ahatziel,nmpountou,stergios}@cs.uoi.gr
Technical Report DCS 2010-03
April 19, 2010
ABSTRACT
We consider the problem of remote access control in federated file
services across independent administrative domains. Existing ap-
proaches either establish complex trust relationships between dis-
tinct domains or require frequent update operations among differ-
ent authentication and authorization services. In order to improve
the manageability and scalability of current solutions, we propose
to specify remote access rights on the basis of federation-wide user
groups (virtual groups) instead of individual users. The members
of a virtual group are users that originate from different domains
and undertake a common role in the federation. The realization of
|
