Multi-domain lightpath authorization, using tokens

Abstract

Abstract.This paper highlights the concepts and results of our research leading to demonstrations during the period [2005][2006][2007] use their own dedicated network infrastructure, designed to handle the required data volumes without being tightly coupled to computational resources. In our paper we will not target such applications but consider data intensive applications that are expected to benefit from the ability of a network to dynamically allocate and reserve lightpaths that are shared at different times with other applications. Several examples of these applications within areas such as data mining and visualisation can be found within the realm of the OptIPuter project. We will also consider network situations were multiple network providers must work together in order to create end-to-end lightpaths. We will assume that providers will allow applications or its middleware to make lightpath reservations. As lightpaths typically do not use network layer data forwarding techniques and rely on layer-2 or below technologies, access control to a lightpath becomes more difficult, in particular if a lightpath needs to be specifically bound to an application. During the course of this paper we will see that network domains and applications can work together in different ways to make sure applications, which reserve a lightpath, actually get unique access to their reserved lightpath. and GEANT2 Autobahn 8 allow applications to reserve and use a lightpath on demand. Within these networks it is however unclear how particular applications can be given exclusive access to a reserved lightpath, whilst preventing other applications from using the same lightpath during its use. In this paper, we show a token based access control mechanism that can be used for this purpose. Recent research and development projects such as Phosphorus 9 and Internet2 DCN aim at making network resources Grid middleware enabled. The token approach is being incorporated and tested in these projects.A token provides a flexible mechanism that allows the right to access a lightpath to be

Authorisation session management in on-demand resource provisioning in collaborative applications

“…The two major use cases for the general CRP are ondemand network resource provisioning (NRP) [12] and Grid-based Collaborative Environments (GCE) [13]. Although different in current implementations, they can be abstracted to the same CRP operational model when considering their implementation with the Grid or Web Services.…”

“…Correspondingly we distinguish the two major types of token in the GAAA-NRP architecture: access tokens and pilot tokens. Access tokens are used in rather traditional manner and described in details in [12]. Pilot tokens functionality and format were proposed and defined as the current development result of the AuthZ infrastructure as an integral component of the NRP infrastructure.…”