Changes between Version 4 and Version 5 of GeniClearinghouse


Ignore:
Timestamp:
02/24/12 15:33:28 (12 years ago)
Author:
mbrinn@bbn.com
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • GeniClearinghouse

    v4 v5  
    33The GENI Clearinghouse is the name we give to a collection of related services supporting federation among experimenters, aggregates and the GMOC.
    44
    5 '''Federation Services'''. The Clearinghouse represents a trust anchor for all software entities (tools, aggregates, services) in the GENI Federation. Anything trusted by the GENI Federation is trusted by any member of the GENI federation. Being trusted by the GENI Federation means having credentials signed by GENI’s PKI private keys testifying to particular attributes for that entity. The installation of the GENI certificate as a trust root at any GENI service allows for federated trust across all users, aggregates and services. In this way, we do not need each entity to explicitly trust each other entity to allow for federation-wide trust: we only need each entity to trust GENI. Thus, we reduce the number of trust relationships from O(N2) to O(N).
     5'''Federation Services'''. The Clearinghouse represents a trust anchor for all software entities (tools, aggregates, services) in the GENI Federation. Anything trusted by the GENI Federation is trusted by any member of the GENI federation. Being trusted by the GENI Federation means having credentials signed by GENI’s PKI private keys testifying to particular attributes for that entity. The installation of the GENI certificate as a trust root at any GENI service allows for federated trust across all users, aggregates and services. In this way, we do not need each entity to explicitly trust each other entity to allow for federation-wide trust: we only need each entity to trust GENI. Thus, we reduce the number of trust relationships from O(N^2) to O(N).
    66
    77The Clearinghouse provides a series of services for managing and asserting the credentials of entities trusted by GENI.