Changes between Version 13 and Version 14 of TIEDABACDemo


Ignore:
Timestamp:
07/10/09 19:17:57 (10 years ago)
Author:
faber@isi.edu
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • TIEDABACDemo

    v13 v14  
    108108There are two classes of princpals that will be requesting access to GENI resources for this contest.  There will be a comparatively small number of officials that will need allocation and configuration rights to the slice in order to set up and administer the game.  There will also be the thousands or more contestants who will need access to the slice, but not configuration rights.  Because of the large number of contestants, the ACM does not want to be directly in charge of vetting each one.  Individual universities (and perhaps other sites) will be able to decide on the criteria to admit players from their institutions independently.  Should anything go amiss - or any kind of cheating be detected - officials will want to know where the contestent came from and how they were admitted.
    109109
     110ACM is deliberately vague about qualifications for participation.  Some universities may choose to make the contest open to any student at the university, or to any student in the local chapter of the CAM.  Others may restrict participation to students enrolled in a prerequisite class.  ACM delegates this decision by designating authorizers at each university.
     111
    110112=== ABAC Encoding (simple delegation) ===
    111113
     
    126128[[Image(example3.png)]]
    127129
     130=== ABAC Encoding (linked roles) ===
     131
     132Because there are many more contestants than officials and the qualifying requirements are locally decided, the access rights to the contest slice are administered more loosely.  This time GENI delegates access to the principals that ACM's CTFreps designate as contestants.
     133
     134[[Image(example4.png)]]
     135
     136ACM now selects principals at each participating university that can authorize contestants (CTFreps).
     137
     138[[Image(example5.png)]]
     139
     140The USC principal selects students individually:
     141
     142[[Image(example6.png)]]
     143
     144The MIT principal opens the contest to all MIT students:
     145
     146[[Image(example7.png)]]
     147
     148And the UCLA principal further delegates the authority to its local ACM officers:
     149
     150[[Image(example8.png)]]
     151
     152Those officers then select individual students:
     153
     154[[Image(example9.png)]]