Dual-Role Based Access Control Framework for Grid Services

In the grid environment, the resource providers should maintain the ultimate authority over their resources, including access authorization and grain scale control. Apparently, the traditional RBAC model will be inappropriate in multi-autonomous domains environment. Focusing on the autonomous, heterogeneous and dynamic features of grid computing, we propose the concept of "Resource Role". We also initiate the dual-role based access control (DRBAC) framework, where the resource role permission mapping is defined in resource domain and user role resource role mapping is negotiated by user domain and resource domain. This framework is simple and works better than the traditional RBAC in multi domains environment