Scalable Security Architecture

Scientific resources and stakeholders are widely distributed, both geographically and organizationally. To access resources and collaborate effectively, scientists need a flexible and secure way to specify access control for their resources and to identify users and their attributes.  The goals of this project are to define and demonstrate a security architecture that will 1) strongly enforce policy for resource use in widely distributed computing environments and 2) provide flexible interfaces that allow the security architecture to be used on various platforms and components. The security architectures can be used for

• Authentication
• Authorization
• Access control
• Confidentiality
• Infrastructure protection
• Distributed enterprise

• Ensure assured, multiple stakeholder representation
• Use trusted third-party certification of user attributes
• Use distributed management of all information needed for access decisions
• Integrate with existing security protocols
• Develop action and object-level access capability
• Allow easy integration with applications
• Develop capabilities to support emerging approaches.

For more info, see:

• Project status (May 2000)
• Project review (May 2000)
• Distributed Security Research Group
• Security Guidelines for Diesel Combustion Collaboratory
• Vision for Collaboratories and the DOE Service Grid (Adobe .pdf format)