Semantic-Based Access Control for Data Resources in Open Grid Services Architecture - Data Access and Integration (OGSA-DAI)

This paper proposes a semantic-based access control system for the data resources in the Open Grid Services Architecture - Data Access and Integration (OGSA-DAI). OGSA-DAI is a widely used middleware for integrating data resources in Grids. However, the identity-based access control in OGSA-DAI causes substantial overhead for the resource providers in virtual organizations (VOs), because the access control information of individual users has to be maintained by each resource provider. To solve these problems, the authors propose a semantic-based access control system using Shibboleth and ontology. Shibboleth, an attribute authorization service, is used to manage the user attributes, and the Web Ontology Language (OWL) is used to represent the ontology of the data resources and users. By using ontology, VOs can resolve the differences in their terminologies and specify access control policies based on concepts and user roles, instead of individual resources and user identities. As a result, the administration overhead of the resource providers is reduced considerably. In addition, the eXtensible Access Control Markup Language (XACML) is used to specify the access control policies uniformly across multiple VOs. The authors also developed an XACML policy administration tool that allows the administrators to create, update, and manage XACML policies. The performance analysis shows that our proposed system adds only a small overhead to the existing security mechanism of OGSA-DAI.

A new service-oriented grid-based method for AIoT application and implementation

The traditional three-layer Internet of things (IoT) model, which includes physical perception layer, information transferring layer and service application layer, cannot express complexity and diversity in agricultural engineering area completely. It is hard to categorize, organize and manage the agricultural things with these three layers. Based on the above requirements, we propose a new service-oriented grid-based method to set up and build the agricultural IoT. Considering the heterogeneous, limitation, transparency and leveling attributes of agricultural things, we propose an abstract model for all agricultural resources. This model is service-oriented and expressed with Open Grid Services Architecture (OGSA). Information and data of agricultural things were described and encapsulated by using XML in this model. Every agricultural engineering application will provide service by enabling one application node in this service-oriented grid. Description of Web Service Resource Framework (WSRF)-based Agricultural Internet of Things (AIoT) and the encapsulation method were also discussed in this paper for resource management in this model.

Semantic-Based Access Control for Data Resources in Open Grid Services Architecture

This paper proposes a semantic-based access control system for the data resources in the Open Grid Services Architecture - Data Access and Integration (OGSA-DAI). OGSA-DAI is a widely used middleware for integrating data resources in Grids. However, the identity-based access control in OGSA-DAI causes substantial overhead for the resource providers in virtual organizations (VOs), because the access control information of individual users has to be maintained by each resource provider. To solve these problems, the authors propose a semantic-based access control system using Shibboleth and ontology. Shibboleth, an attribute authorization service, is used to manage the user attributes, and the Web Ontology Language (OWL) is used to represent the ontology of the data resources and users. By using ontology, VOs can resolve the differences in their terminologies and specify access control policies based on concepts and user roles, instead of individual resources and user identities. As a result, the administration overhead of the resource providers is reduced considerably. In addition, the eXtensible Access Control Markup Language (XACML) is used to specify the access control policies uniformly across multiple VOs. The authors also developed an XACML policy administration tool that allows the administrators to create, update, and manage XACML policies. The performance analysis shows that our proposed system adds only a small overhead to the existing security mechanism of OGSA-DAI.

Research on a Scheme of Heterogeneous Data Integration

Aiming at the limitation of Open Grid Services Architecture-Data Access and Integration middleware only face to JDBC, learning from the design ideas of OGSA-DAI, based on XML and web service, this paper proposes a middleware named XML Transformation-Data Access and Integration using ADO.NET. It analyzes the component structure of the middleware, the interaction of the workflow and the underlying data resources as well as the execution process of the workflow. It describes the conversion process between XML and database. Test result shows that the middleware gets good versatility and easy scalability in heterogeneous data access.

Execution Management for Mobile Service-Oriented Environments

This paper presents an Execution Management System (EMS) for Grid services that builds on the Open Grid Services Architecture (OGSA) while achieving “mobile awareness” by establishing a WS-Notification mechanism with mobile network session middleware. It builds heavily on the Session Initiation Protocol (SIP), used for managing sessions with mobile terminals (such as laptops and PDAs) where the services are running. Although the management of mobile services is different to that of ubiquitous services, the enhanced EMS manages both of them in a seamless fashion and incorporates all resources into one Mobile Dynamic Virtual Organization (MDVO). The described EMS has been implemented within the framework of the Akogrimo EU IST project and has been used to support mission critical application scenarios in public demonstrations, including composite and distributed applications made of both ubiquitous and mobile services within multiple domains.

Grid Technology for Smart Organizations

This chapter summarizes the most relevant results that grid research achieved in the last decade, it presents the actual issues of the topic, and it outlines how current and future results from this area can contribute to smart organizations. At the first place the basic goal of the Grid is presented and its state-of-the-art, service-based realization is discussed. This global infrastructure will one day connect together diverse types of hardware and software elements, abstracting them out as intelligent autonomous agents that can discover and collaborate with each other on demand. The middle part of the chapter introduces two potential middleware technologies that service grids can be built on. They are the Web services-based open grid services architecture (OGSA) and Jini. The final part of the chapter presents the future of service grids and the important role these flexible infrastructures will probably have in the life of smart organizations.

Grid Technology for Smart Organizations

This chapter summarizes the most relevant results that grid research achieved in the last decade, it presents the actual issues of the topic, and it outlines how current and future results from this area can contribute to smart organizations. At the first place the basic goal of the Grid is presented and its state-of-the-art, service-based realization is discussed. This global infrastructure will one day connect together diverse types of hardware and software elements, abstracting them out as intelligent autonomous agents that can discover and collaborate with each other on demand. The middle part of the chapter introduces two potential middleware technologies that service grids can be built on. They are the Web services-based open grid services architecture (OGSA) and Jini. The final part of the chapter presents the future of service grids and the important role these flexible infrastructures will probably have in the life of smart organizations.

Building Adaptive E-Business Infrastructure for Intelligent Enterprises

With the advancement of information technology and business transformation, an enterprise has to be adaptive to expand its infrastructure and collaborate with its internal and external business processes to make more profits from its value chain. As an enabling technology, Web services provide a standard means to allow heterogenous applications to communicate with each other using Simple Object Access Protocol (SOAP). The standard interface description language and communication mechanism of Web services are the keys to build a modularized and adaptive e-business infrastructure that can adjust to the changing environments. In this chapter, we will introduce how to use Web services and Grid services to build adaptive e-business infrastructure for intelligent enterprise. Specifically, we will introduce a conceptual architecture of building adaptive e-business infrastructure using Web services. Then we will present an overview of Web services creation and invocation, federated Web services discovery and Web services flow composition. After that, a concept of universal Grid service is introduced for enabling Open Grid Services Architecture to support business process integration and management. At the end of this chapter, we will conclude by introducing our vision on the future adaptive e-business infrastructure for intelligent enterprise.