Ibrahim, Maizura and Ibrahim, Hamidah and Abdullah, Azizol and Latip, Rohaya (2016) A high performance UCON and semantic-based authorization framework for grid computing. Journal of Information and Communication Technology, 15 (1). pp. 183-202. ISSN 2180-3862

PDF Restricted to Registered users only Download (7MB) | Request a copy

Abstract

Authorization infrastructures are an important and integral part of grid computing which facilitate access control functions to protect resources.This paper presents an authorization framework that combines the usage control (UCON) model with semantic web technology.To our knowledge, an authorization framework that combines both the UCON and semantic web technology in one framework has not yet been previously proposed.As the UCON model combines traditional access control, trust management and digital rights management in a grid authorization infrastructure, its adoption enhances the capability of the authorization. However, UCON-based authorization presents a problem in controlling the policy granularity and minimizing the authorization overhead due to complexity in the policies inherited from the UCON model.The growing number of users and resources in the grid makes this problem even worse.We use the semantic web technology to provide a way to automatically manage the rules in the policies, hence keeping the granularity under control. To minimize the authorization overhead, a new mechanism to reduce the number of policy checks is proposed in this paper. Our simulation result shows that the proposed mechanism provides a 63% reduction in rule checking compared to previous methods.

Item Type:	Article
Uncontrolled Keywords:	Grid computing, UCON, security policy, ontology, semantic web, grid authorization.
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:	School of Computing
Depositing User:	Mrs. Norazmilah Yaakub
Date Deposited:	29 Apr 2018 01:43
Last Modified:	29 Apr 2018 01:43
URI:	https://repo.uum.edu.my/id/eprint/24078

Actions (login required)

View Item