An Ontology-Based Virtualization Access Control Framework for Grid Service

This paper is mainly devoted to analyze the efficiency of security administration and assurance of virtual organization(VO) in autonomous domains. For grid applications, access control is usually implemented through mapping VO-space users to autonomous domains' local users, which reduces the efficiency of security administration and bears the risk of violating security policy of these domains applying RBAC model. A general authentication and access control architecture is proposed, which rarely has negative effect on security administration efficiency, and is compatible with autonomous domain's security policy. Based on this model, the study of ontology service in VO provides a sound basis for the dynamic, cooperative and multilevel characteristics for different resources.