The proposed ontology specifications can describe various entities (e.g. cloud, system, software, etc)., whereas the authorization model can deal with user authentication and authorization tasks.
Using Grid computing, either for data or computing relevant concerns, also necessitates user authentication and authorization [18] mechanisms.
However, accessing and exploiting remote cloud-based resources is associated with numerous security and privacy implications, including user authentication and authorization.
The open group defines SSO as the mechanism whereby a single action of user authentication and authorization can permit a user to access all computers and systems where that user has access permission, without the need to enter multiple passwords.
Interoperability of Identity information: While performing user authentication and authorization, identity credentials could be expressed in a variety of ways for instance X.509 certificates, SAML assertions or WS-Federation security tokens.
We consider that the user authentication credentials, authorization rights and look-up tables are stored and maintained with highly secured in-house databases or trustee databases as shown in Fig. 3.
Using a cloud-oriented API derived from the mOSAIC project (http://www.mosaic-project.eu/), the authors built up an SLA-oriented cloud application that enables the management of security features related to user authentication and authorization of an IaaS Cloud Provider.
HSS stores the user identifications and the relations between the different public and private identifiers of users for Authentication, Authorization and Accounting (AAA).
It has three main components: Data organization and dissemination User management and authentication Authorization management It is developed as an extensible data management platform, and it reuses a number of open source projects including CherryPy—"a pythonic, object-oriented web framework".
The Information Server (IS) may be located in the visited domains or in the users' home domain, that is, the domain of the service provider that holds information about the users' authentication and authorization profiles.
