A national-scale authentication infrastructure

Citations Over TimeTop 1% of 2000 papers

Abstract

Participants in virtual organizations commonly need to share resources such as data archives, computer cycles, and networks, resources usually available only with restrictions based on the requested resource's nature and the user's identity. Thus, any sharing mechanism must have the ability to authenticate the user's identity and determine whether the user is authorized to request the resource. Virtual organizations tend to be fluid, however, so authentication mechanisms must be flexible and lightweight, allowing administrators to quickly establish and change resource-sharing arrangements. Nevertheless, because virtual organizations complement rather than replace existing institutions, sharing mechanisms cannot change local policies and must allow individual institutions to maintain control over their own resources. Our group has created and deployed an authentication and authorization infrastructure that meets these requirements: the Grid Security Infrastructure (I. Foster et al., 1998). GSI offers secure single sign-ons and preserves site control over access policies and local security. It provides its own versions of common applications, such as FTP and remote login, and a programming interface for creating secure applications. Dozens of supercomputers and storage systems already use GSI, a level of acceptance reached by few other security infrastructures.

Related Papers

• → Secured Authentication by Single Sign On (SSO): A Big Picture(2022)4 cited
• → Logout in Single Sign-on Systems(2013)5 cited
• → Single Sign-On: Is It Really Possible?(2000)7 cited
• The Implementation of the Portal System of Library Based on Single Sign-on of ASP.NET(2012)
• Research and implementation of single sign-on technology based on Java EE(2015)