Named piece of functionality (or feature) that is declared as supported or requested by an agent.
A type of firewall. All internal computers establish a "circuit" with the proxy server. The proxy server performs all communications with the Internet. External computers only see the IP address of the proxy server and never communicate directly with the internal clients (cp. Application Level Gateway).
Declaration made by an entity (e.g. name, identity, key, group, privilege, capability, attribute, etc.).
Person or organisation using a Grid Service. They may pay for the service, in which case they may also be referred to as a Customer.
Collection of computers that may be used singly, in groups, or as one. They are usually internal to a Service Provider.
Abstract unit of software and internal state that provides a transformation of data via its interface(s). A component is a unit of architecture with defined boundaries.
A sequence of predicates combined using the logical AND operation.
An approach to delegation that builds on the separation of concerns between administrative permissions and access permissions (also referred to by the term Administrative Delegation).
An access permission is a traditional permission which grants access to a resource. Administrative permissions specify what other permissions may be created. In this approach, however, an administrative permission contains some access permission and a constraint on its delegation. The access permission constrains what accesses may ultimately be allowed based on that administrative permission. The delegation constraint specifies to whom the permission may be delegated. It does so by means of a sequence of constraints that corresponds to a sequence of issuers in a chain of delegation. The purpose of constrained delegation is for instance to limit the permissions to a part of an organisation. The constraints can also be used for expressing that someone may administer permissions of others, but cannot grant those permissions to oneself which appears to be useful in several scenarios relating to outsourcing across organisations. (A XACML 1.1 rule is an example of access permission. XACML does not currently support administrative permissions.)
Exertion of Control is to cause a desired change in state. Management systems may control the life cycle of manageable Web services or information flow such as messages.
A Web service conversation involves maintaining some state during an interaction that involves multiple messages and/or participants.
Contains the activity identifier, its Coordination Type and a reference to a Registration service that participants can use to register for one or more of the protocols supported by that activity's coordination type.
The definition of the coordination behaviour and the messages exchanged between the coordinator and a participant playing a specific role within a coordination type. WSDL definitions are provided, along with sequencing rules for the messages.
A logical aggregation of an activation service, a registration service, and a set of coordination protocol services.
A defined set of coordination behaviours, including how the service accepts context creations and coordination protocol registrations, and drives the coordination protocols associated with the activity.
Proof of qualification, competence, or clearance that is attached to a person and often considered as an attribute (or evidence that is sufficient for deriving an attribute) of that person.
Use of software and architectural principles in the style of EAI in order to integrate a set of business functions and enterprise applications across enterprise boundaries.
Common Technical Requirement.
A paying Client of a Grid Service (see also Client).
© 2007 BEinGRID