Semantic-Based Access Control for Grid Data Resources in Open Grid Services Architecture - Data Access and Integration (OGSA-DAI)

Author(s):  
Vineela Muppavarapu ◽  
Soon M. Chung
Author(s):  
Vineela Muppavarapu ◽  
Soon M. Chung

This paper proposes a semantic-based access control system for the data resources in the Open Grid Services Architecture - Data Access and Integration (OGSA-DAI). OGSA-DAI is a widely used middleware for integrating data resources in Grids. However, the identity-based access control in OGSA-DAI causes substantial overhead for the resource providers in virtual organizations (VOs), because the access control information of individual users has to be maintained by each resource provider. To solve these problems, the authors propose a semantic-based access control system using Shibboleth and ontology. Shibboleth, an attribute authorization service, is used to manage the user attributes, and the Web Ontology Language (OWL) is used to represent the ontology of the data resources and users. By using ontology, VOs can resolve the differences in their terminologies and specify access control policies based on concepts and user roles, instead of individual resources and user identities. As a result, the administration overhead of the resource providers is reduced considerably. In addition, the eXtensible Access Control Markup Language (XACML) is used to specify the access control policies uniformly across multiple VOs. The authors also developed an XACML policy administration tool that allows the administrators to create, update, and manage XACML policies. The performance analysis shows that our proposed system adds only a small overhead to the existing security mechanism of OGSA-DAI.


Author(s):  
Vineela Muppavarapu ◽  
Soon M. Chung

This paper proposes a semantic-based access control system for the data resources in the Open Grid Services Architecture - Data Access and Integration (OGSA-DAI). OGSA-DAI is a widely used middleware for integrating data resources in Grids. However, the identity-based access control in OGSA-DAI causes substantial overhead for the resource providers in virtual organizations (VOs), because the access control information of individual users has to be maintained by each resource provider. To solve these problems, the authors propose a semantic-based access control system using Shibboleth and ontology. Shibboleth, an attribute authorization service, is used to manage the user attributes, and the Web Ontology Language (OWL) is used to represent the ontology of the data resources and users. By using ontology, VOs can resolve the differences in their terminologies and specify access control policies based on concepts and user roles, instead of individual resources and user identities. As a result, the administration overhead of the resource providers is reduced considerably. In addition, the eXtensible Access Control Markup Language (XACML) is used to specify the access control policies uniformly across multiple VOs. The authors also developed an XACML policy administration tool that allows the administrators to create, update, and manage XACML policies. The performance analysis shows that our proposed system adds only a small overhead to the existing security mechanism of OGSA-DAI.


Author(s):  
Bartosz Dobrzelecki ◽  
Amrey Krause ◽  
Alastair C. Hume ◽  
Alistair Grant ◽  
Mario Antonioletti ◽  
...  

OGSA-DAI (Open Grid Services Architecture Data Access and Integration) is a framework for building distributed data access and integration systems. Until recently, it lacked the built-in functionality that would allow easy creation of federations of distributed data sources. The latest release of the OGSA-DAI framework introduced the OGSA-DAI DQP (Distributed Query Processing) resource. The new resource encapsulates a distributed query processor, that is able to orchestrate distributed data sources when answering declarative user queries. The query processor has many extensibility points, making it easy to customize. We have also introduced a new OGSA-DAI V iews resource that provides a flexible method for defining views over relational data. The interoperability of the two new resources, together with the flexibility of the OGSA-DAI framework, allows the building of highly customized data integration solutions.


2012 ◽  
Vol 546-547 ◽  
pp. 381-386
Author(s):  
Bao Sheng Wang ◽  
Sheng Yao Sun ◽  
Yan Yang Ma ◽  
Xin Feng Yang

Aiming at the limitation of Open Grid Services Architecture-Data Access and Integration middleware only face to JDBC, learning from the design ideas of OGSA-DAI, based on XML and web service, this paper proposes a middleware named XML Transformation-Data Access and Integration using ADO.NET. It analyzes the component structure of the middleware, the interaction of the workflow and the underlying data resources as well as the execution process of the workflow. It describes the conversion process between XML and database. Test result shows that the middleware gets good versatility and easy scalability in heterogeneous data access.


2020 ◽  
Vol 36 (4) ◽  
pp. 1773-1784
Author(s):  
Lihua Zhang ◽  
Jingjing Li ◽  
Fangzhou Hu ◽  
Yang Huang ◽  
Jiayi Bai

Author(s):  
Tamas Kukla ◽  
Tamas Kiss ◽  
Peter Kacsuk ◽  
Gabor Terstyanszky

Although many scientific applications rely on data stored in databases, most workflow management systems are not capable of establishing database connections during workflow execution. For this reason, e-Scientists have to use different tools before workflow submission to access their datasets and gather the required data on which they want to carry out computational experiments. Open Grid Services Architecture Data Access and Integration (OGSA-DAI) is a good candidate to use as middleware providing access to several structured and semi-structured database products through Web/Grid services. The integration technique and its reference implementation described in this paper enable e-Scientists to reach databases via OGSA-DAI within their scientific workflows at run-time and give a general solution that can be adopted by any workflow management system.


Sign in / Sign up

Export Citation Format

Share Document