skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Security and Policy for Group Collaboration

Abstract

“Security and Policy for Group Collaboration” was a Collaboratory Middleware research project aimed at providing the fundamental security and policy infrastructure required to support the creation and operation of distributed, computationally enabled collaborations. The project developed infrastructure that exploits innovative new techniques to address challenging issues of scale, dynamics, distribution, and role. To reduce greatly the cost of adding new members to a collaboration, we developed and evaluated new techniques for creating and managing credentials based on public key certificates, including support for online certificate generation, online certificate repositories, and support for multiple certificate authorities. To facilitate the integration of new resources into a collaboration, we improved significantly the integration of local security environments. To make it easy to create and change the role and associated privileges of both resources and participants of collaboration, we developed community wide authorization services that provide distributed, scalable means for specifying policy. These services make it possible for the delegation of capability from the community to a specific user, class of user or resource. Finally, we instantiated our research results into a framework that makes it useable to a wide range of collaborative tools. The resulting mechanisms and software have been widely adopted withinmore » DOE projects and in many other scientific projects. The widespread adoption of our Globus Toolkit technology has provided, and continues to provide, a natural dissemination and technology transfer vehicle for our results.« less

Authors:
;
Publication Date:
Research Org.:
Univ. of Southern California, Los Angeles, CA (United States)
Sponsoring Org.:
USDOE - Office of Energy Research (ER)
OSTI Identifier:
888467
Report Number(s):
DOE/ER/25463-1
TRN: US200719%%398
DOE Contract Number:  
FC02-01ER25463
Resource Type:
Technical Report
Country of Publication:
United States
Language:
English
Subject:
99 GENERAL AND MISCELLANEOUS//MATHEMATICS, COMPUTING, AND INFORMATION SCIENCE; DISTRIBUTION; SECURITY; TECHNOLOGY TRANSFER; Security, Policy, Group Collaboration

Citation Formats

Foster, Ian, and Kesselman, Carl. Security and Policy for Group Collaboration. United States: N. p., 2006. Web. doi:10.2172/888467.
Foster, Ian, & Kesselman, Carl. Security and Policy for Group Collaboration. United States. https://doi.org/10.2172/888467
Foster, Ian, and Kesselman, Carl. Mon . "Security and Policy for Group Collaboration". United States. https://doi.org/10.2172/888467. https://www.osti.gov/servlets/purl/888467.
@article{osti_888467,
title = {Security and Policy for Group Collaboration},
author = {Foster, Ian and Kesselman, Carl},
abstractNote = {“Security and Policy for Group Collaboration” was a Collaboratory Middleware research project aimed at providing the fundamental security and policy infrastructure required to support the creation and operation of distributed, computationally enabled collaborations. The project developed infrastructure that exploits innovative new techniques to address challenging issues of scale, dynamics, distribution, and role. To reduce greatly the cost of adding new members to a collaboration, we developed and evaluated new techniques for creating and managing credentials based on public key certificates, including support for online certificate generation, online certificate repositories, and support for multiple certificate authorities. To facilitate the integration of new resources into a collaboration, we improved significantly the integration of local security environments. To make it easy to create and change the role and associated privileges of both resources and participants of collaboration, we developed community wide authorization services that provide distributed, scalable means for specifying policy. These services make it possible for the delegation of capability from the community to a specific user, class of user or resource. Finally, we instantiated our research results into a framework that makes it useable to a wide range of collaborative tools. The resulting mechanisms and software have been widely adopted within DOE projects and in many other scientific projects. The widespread adoption of our Globus Toolkit technology has provided, and continues to provide, a natural dissemination and technology transfer vehicle for our results.},
doi = {10.2172/888467},
url = {https://www.osti.gov/biblio/888467}, journal = {},
number = ,
volume = ,
place = {United States},
year = {2006},
month = {7}
}