000000211 001__ 211
000000211 005__ 20130522141948.0
000000211 037__ $$aLERSSE-PRESENTATION-2009-080
000000211 041__ $$aeng
000000211 100__ $$aQiang Wei
000000211 245__ $$aAuthorization Using the Publish-Subscribe Model
000000211 260__ $$c2008-12-12
000000211 300__ $$amult. p
000000211 520__ $$aTraditional authorization mechanisms based on the request-response model are generally supported by point-to-point communication between applications and authorization servers. As distributed applications increase in size and complexity, an authorization architecture based on point-to-point communication becomes fragile and difficult to manage. This paper presents the use of the publish-subscribe (pub-sub) model for delivering authorization requests and responses between the applications and the authorization servers. Our analysis suggests that using the pub-sub architecture improves authorization system availability and reduces system administration overhead. We evaluate our design using a prototype implementation, which confirms the improvement in availability. Although the response time is also increased, this impact can be reduced by bypassing the pub-sub channel when returning authorizations or by caching coupled with local inference of authorization decisions based on previously cached authorizations.
000000211 6531_ $$apublish/subscribe
000000211 6531_ $$apub/sub
000000211 6531_ $$aauthorization infrastructure
000000211 6531_ $$aJAMES
000000211 6531_ $$aSAAM
000000211 6531_ $$aspeculative authorization
000000211 700__ $$aMatei Ripeanu
000000211 700__ $$aKonstantin Beznosov
000000211 8560_ $$fqiangw@ece.ubc.ca
000000211 8564_ $$uhttp://lersse-dl.ece.ubc.ca/record/211/files/211.pdf$$yTransfer from CDS 0.99.7
000000211 909C4 $$pQei Wei, Konstantin Beznosov, and Matei Ripeanu, “Authorization Using Publish/Subscribe Models,” In Proceedings of the 2008 IEEE International Symposium on Parallel and Distributed Processing with Applications (ISPA'08), 10-12 December, 2008, Sydney, Australia. IEEE Computer Society, pp.53-62.
000000211 980__ $$aPRESENTATION