Spatial data access control in grid environment

A spatial data access control model in grid environment was proposed base on Globus Security Infrastructure (GSI). Firstly, A spatial datasets sharing framework was built up by Monitor and Discover Service (MDS), and then a common control model was proposed to realize spatial data access control. In this model, every user was mapped to a given role, and every role had a unique digital certificate to distinguish its identification, then every role had the given permission to access the resources. Moreover, a further designed model was proposed to control the role´s accessibility of rectangle in given spatial datasets. Two scenarios were put forward to control spatial data access between different organizations. The first was that all of the organizations shared the same roles, and then the organization realized self-control by enduing different roles with different rights. While the second was that every organization had its own users, roles and resource controls, and then the self-control was enhanced. The model was implemented by Globus Toolkits (GT), and experiment results illustrated that the proposed model could control the spatial data access effectively in a grid environment.