GridRequirements - ESP GRID Wiki

Requirements gathering for secure access and use of a generic grid

Currently we are seeking assistance to build a list of use-cases that will lead us towards a set of functional requirements for access management and security for a generic grid. (The 'generic grid' is a production grid, with production applications and a set of users with a wide variety of skills and interests.) We are trying to avoid any limitations with current technologies and to think clearly about requirements before considering technology. This is an early workpackage for the ESP-GRID project.

Bibliography

RequirementsBibliography

 * sources and references to articles and papers used in this Requirements gathering exercise

Focus Group

FocusGroup

 * Notes and reports from the focus group meeting

Use Cases

UseCases

 * use cases for a generic grid

Top-level requirements described below under:

 * Grid AAA (A) requirements (authentication authorisation and accounting, and auditing) 
 * Grid protection of data requirements (privacy, confidentiality, integrity, digital rights management) 
 * Grid operational characteristics (trust, performance and scalability, manageability incl. architectural components, interoperability, assurance) 
 * Additional requirements which need a better home (single log-on, policy exchange)

Grid AAA requirements (authentication authorisation and accounting, and auditing) described under:

Authentication AuthN

Include Note

identity, anonymity, pseudonimity (secure anonymous communication), credential lifespan and renewal (short-term credentials), assurance levels (SEE ALSO Operational Characteristics), revocation, policies, documentation, usability, trust (SEE ALSO Operational Characteristics) and responsibility, secure roaming

Insert definition here and requirements follow...

Authorisation AuthZ

Include Note

identity, grouping users/roles, authorisation levels, revocation, attributes, policies, 'transparency', privacy, logging, credentials, fault tolerance, delegation, XXXXmore...

Insert definition here and requirements follow...

Accounting

Include Note

accurate billing and metering, (operational costs, service levels), monitoring or logging, resource and end entity - secure logging, scheduling and resource management. SEE ALSO Grid Auditing

Insert definition here and requirements follow...

Auditing

Include Note

'Accounting as a security component', monitoring or secure logging (resource access decisions, policies, policy changes, resource implication of policies), audit logs, intrusion detection, forensics, diagnostics, audit trail (AuthN and AuthZ). SEE ALSO GridAccounting

Insert definition here and requirements follow...

Grid protection of data requirements described under:

Include Note

Privacy

Include Note

use of data, (supported by confidentiality mechanisms including AuthZ), significant for health data etc.