Access control of global distributed storage system

In this paper, we identify the access control requirements for data grid and describe a new distributed access control model to meet these requirements. The model integrates ticket-based data access control and extends access control list. The data sharing and access control among different users and groups are completed by the combination of team-based access control methods and role-based access control methods, called group-and-role-based access control. In this paper, we present the GDSS system to describe this model and evaluate the performance.