VO-based Dynamic Security Associations in Collaborative Grid Environment

This paper discusses how the Virtual Organisation (VO) concept can be used for managing dynamic security associations in collaborative Grid applications and for complex resource provisioning. The paper contains both research part and discusses further development of the popular VO management software the VO Membership Service (VOMS). The paper provides an overview of current practices in VO management in major Grid projects including operational procedures and the supporting security middleware. The paper identifies open issues and basic requirements to the VO security functionality and services and suggests possible directions of further research and development. The proposed conceptual VO model and VO management framework provide a basis for consistent VO services definition and development to support different VO operational models. The paper intends to provide a framework for common understanding of the VO concept among Grid community and collaborative community and industry. The paper is based on experiences gained from the major Grid based and Grid oriented projects in collaborative applications and complex resource provisioning.