Changes between Version 13 and Version 14 of TIEDABACDemo

Timestamp:

07/10/09 19:17:57 (15 years ago)

Author:

faber@isi.edu

Comment:

--

TIEDABACDemo

@@ -108 +108 @@
 There are two classes of princpals that will be requesting access to GENI resources for this contest.  There will be a comparatively small number of officials that will need allocation and configuration rights to the slice in order to set up and administer the game.  There will also be the thousands or more contestants who will need access to the slice, but not configuration rights.  Because of the large number of contestants, the ACM does not want to be directly in charge of vetting each one.  Individual universities (and perhaps other sites) will be able to decide on the criteria to admit players from their institutions independently.  Should anything go amiss - or any kind of cheating be detected - officials will want to know where the contestent came from and how they were admitted.
 
+ACM is deliberately vague about qualifications for participation.  Some universities may choose to make the contest open to any student at the university, or to any student in the local chapter of the CAM.  Others may restrict participation to students enrolled in a prerequisite class.  ACM delegates this decision by designating authorizers at each university.
+
 === ABAC Encoding (simple delegation) ===
 
@@ -126 +128 @@
 [[Image(example3.png)]]
 
+=== ABAC Encoding (linked roles) ===
+
+Because there are many more contestants than officials and the qualifying requirements are locally decided, the access rights to the contest slice are administered more loosely.  This time GENI delegates access to the principals that ACM's CTFreps designate as contestants.
+
+[[Image(example4.png)]]
+
+ACM now selects principals at each participating university that can authorize contestants (CTFreps).
+
+[[Image(example5.png)]]
+
+The USC principal selects students individually:
+
+[[Image(example6.png)]]
+
+The MIT principal opens the contest to all MIT students:
+
+[[Image(example7.png)]]
+
+And the UCLA principal further delegates the authority to its local ACM officers:
+
+[[Image(example8.png)]]
+
+Those officers then select individual students:
+
+[[Image(example9.png)]]