RB-GDM: A Role-Based Grid Delegation Model

Grid delegation is the procedure by which a valid user endows another user or a program or service with the ability to act on that user’s behalf. Delegation is the primary form of authorization in grids. The large and geographically distributed, dynamic, heterogeneous and scalable grid environment poses unique delegation requirements. Presently there are no standard mechanisms to guide grid delegation. As credential delegation has its own limitations in a dynamic grid environment, a new conceptual model is required to effectively formulate the grid delegation requirements. In this paper, we present a framework called RoleBased Grid Delegation Model (RB-GDM) for delegating access rights in grids. The basic unit of delegation in our model is role. Derived from the standard RBAC formalisms, this framework explores various approaches for authorization and revocation of delegation.