Using Workflow for Dynamic Security Context Management in Complex Resource Provisioning

This paper presents ongoing research and current results on developing flexible access control infrastructure for complex resource provisioning in Gridbased collaborative applications and on-demand network services provisioning. In both cases the workflow can provide required orchestration of multiple Grid or Web services representing individual resources/services across multiple administrative and security domains and along the whole multistage provisioning process and experiment or job execution. Workflow execution and management tools can be used for possible security context changes in sense of domain dependent or execution stage defined policies and user or services attributes. The paper describes how such required functionality is achieved in developing GAAA-P profile for provisioning. The paper is based on experiences gained from the major Grid based and Grid oriented projects such as EGEE, NextGrid, Collaboratory.nl and GigaPort Research on Network.