A Design Space Review for General Federation Management Using Keystone

As computing devices become increasingly connected, and at a global scale, methods must be developed to flexibly, yet securely, manage their interactions. In the most general sense, this requires federation management. The virtual organization (VO) concept provides a federated, security and discovery context whereby collaboration across multiple administrative domains can be transparently enabled while enforcing joint security policies. This paper presents a systematic review of the VO-based, federation management design space. We start by presenting an abstract, VO-based federation model. We then examine centralized third-parties, proxies, and distributed peers as avenues of implementation. For relevance, this examination is done in the context of Open Stack and the Keystone service. Each approach has its pros and cons, and will be suitable in different application scenarios.