Grid computing control system

• US 7,421,500 B2
• Filed: 01/10/2003
• Issued: 09/02/2008
• Est. Priority Date: 01/10/2003
• Status: Expired due to Fees

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Kumar, Rajendra, Talwar, Vanish, Basu, Sujoy
• Primary Examiner(s): Nguyen; Phuoc H
• Application Number:
  US10/340,436
• Publication Number:
  US 20040139202A1
• Time in Patent Office: 2,062 Days
• Field of Search: 709/220, 709/223, 709/226, 709/227
• US Class Current: 709/227
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Embodiments of the present invention provide a method for grid computing access control and a system thereof. A command is received from a user. The authorization of the user to execute the command is verified. A system parameter is monitored during execution of the command.

Claims

1. A grid computing control system comprising:

a grid interactive shell, for receiving a command for execution on a computing resource, wherein said grid interactive shell is coupled to an operating system of a computing resource;

a grid monitoring system coupled to said interactive shell and said operating system of said computing resource;

a plurality of system policy files coupled to said grid interactive shell and said grid monitoring system;

a session specific policy module for verifying said command conforms to a quality of service guarantee; and

an access control subsystem comprises one or more modules selected from the group consisting of an executables and files access control module, a user binaries module, a session access control module, and a quality of service access control module.

2. The grid computing control system according to claim 1, wherein said grid interactive shell further receives an application for execution on said computing resource.

3. The grid computing control system according to claim 1, wherein said grid interactive shell comprises:

a command interpreter, for parsing said command; and

the access control subsystem, for verifying a first plurality of system and session parameters.

4. The grid computing control system according to claim 1, wherein said grid monitoring system comprises:

a plurality of monitoring agents, for monitoring a second plurality of system and session parameters; and

a log file, for recording a plurality of system and session data.

5. The grid computing control system according to claim 4, wherein said plurality of monitoring agents comprises one or more modules selected from the group consisting of said session specific policy module, a quality of service guarantees module, an intrusion detection module, and an intrusion prevention module.

6. A computer readable-medium comprising a plurality of instructions which when executed cause a grid computing resource to execute a resource management process comprising:

verifying a requested command is an allowable executable;

verifying said requested command includes an allowed argument;

verifying said requested command conforms to a session specific policy;

verifying said requested command conforms to a quality of service guarantee;

monitoring compliance with said session specific policy during execution of said requested command;

monitoring compliance with said quality of service guarantee during execution of said requested command; and

verifying said requested command includes a trusted signature, wherein said requested command comprises a user specified binary.

7. The process according to claim 6, further comprising:

monitoring to detect an intrusion during execution of said requested command; and

monitoring to prevent said intrusion during execution of said requested command.