Služba pro obnovu identifikačních údajů u dlouhoběžících úloh

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F05%3A00000147" target="_blank" >RIV/63839172:_____/05:00000147 - isvavai.cz</a>

Výsledek na webu

—

DOI - Digital Object Identifier

—

Jazyk výsledku

angličtina

Název v původním jazyce

A Credential Renewal Service for Long-Running Jobs

Popis výsledku v původním jazyce

Jobs on the Grid require security credentials throughout their run for accessing secure Grid resources. However, delegating long-lived credentials to long-running jobs brings an increased risk that a credential will be compromised and misused. Additionally, it is often difficult to predict the run-time of jobs on the Grid, due to changes in application performance and resource load, making it difficult to set the lifetime of the delegated credential in advance. We have developed a solution to this problem for the EU DataGrid project using the MyProxy online credential repository and have further evolved it during the EGEE project. This system has been used for credential renewal in Grids in Europe for over three years. In this paper, we present the system design, describe our experiences, and discuss the security implications of this approach.

Název v anglickém jazyce

A Credential Renewal Service for Long-Running Jobs

Popis výsledku anglicky

Jobs on the Grid require security credentials throughout their run for accessing secure Grid resources. However, delegating long-lived credentials to long-running jobs brings an increased risk that a credential will be compromised and misused. Additionally, it is often difficult to predict the run-time of jobs on the Grid, due to changes in application performance and resource load, making it difficult to set the lifetime of the delegated credential in advance. We have developed a solution to this problem for the EU DataGrid project using the MyProxy online credential repository and have further evolved it during the EGEE project. This system has been used for credential renewal in Grids in Europe for over three years. In this paper, we present the system design, describe our experiences, and discuss the security implications of this approach.

Druh

D - Stať ve sborníku

CEP obor

JC - Počítačový hardware a software

OECD FORD obor

—

Projekt

—

Návaznosti

Z - Vyzkumny zamer (s odkazem do CEZ)

Rok uplatnění

2005

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název statě ve sborníku

Proceedings of the 6th IEEE/ACM International Workshop on Grid Computing (GRID'05)

ISBN

0-7803-9493-3

ISSN

—

e-ISSN

—

Počet stran výsledku

6

Strana od-do

63-68

Název nakladatele

IEEE Computer Society

Místo vydání

Seattle

Místo konání akce

Seattle

Datum konání akce

13. 11. 2005

Typ akce podle státní příslušnosti

WRD - Celosvětová akce

Kód UT WoS článku

—