Introduction: the trend towards SOA and SOI

Service Oriented Architecture (SOA) furnishes one of the key guiding principles in applications and systems development in many domains, including health, e-learning and financial among others (Kart et al. 2007; Pasatcha and Sunat 2008). SOA aims to simplify development and delivery of new business functionalities, enabling service reusability and interoperability and reducing development and maintenance costs (Radhakrishnan and Sriraman 2007). Meanwhile, current business and scientific applications continuously pose stricter requirements for performance, availability, security, scalability, privacy, usability and flexibility. Within this context, Service Oriented Infrastructures (SOI) -in compliance with SOA—come to fill in these gaps by providing infrastructural resources as services.

Grid and Cloud computing comprise a heavily-researched and very promising attempt for SOI realisation both in the industrial (Thanos et al. 2007) and the scientific world. Although initially designed and developed for facilitating high performance computing applications, such as simulations, this new computing approach aims also at supporting highly collaborative applications across organisations and users of different expertise and varying levels of authorisation. The Grid infrastructure, and gradually the Cloud, is incorporating efficient mechanisms for aggregating, managing and orchestrating various resources (computational resources, data, storage, services, applications, knowledge, human expertise). These resources might be heterogeneous, distributed and dynamic, serving a continuously increasing number of users with differing requirements wanting Quality of Service (QoS) and who are subject to different access and service use policies.

Identity in Grid and SOA: questions and issues

Given the current trend of increasing complexity of collaboration among users and systems, there are two aspects of paramount importance to the implementation of SOI: First, the heterogeneity, the dynamic nature and the geographical dispersion of the resources (even across organisational boundaries) (Zhang et al. 2008) and second, the nature of business processes concerning complex policies for informational privacy, security and privacy comprise two aspects of paramount importance to the implementation of SOI (Mikkonen and Silander 2006), (Jana et al. 2009).

Important issues are raised that need to be properly handled such as confidentiality, traceability, non-repudiation, data protection, informational privacy, access control and trust and need to be properly handled. Failing to deal adequately with them may lead to serious consequences, such as sensitive information leak and unauthorised access to important business processes, and hence adopting Grid and Cloud computing requires extensive cooperation among the relevant experts.

Managing identity in the Grid and SOA

This special issue aims at presenting current practices, trends and mechanisms on identity management in Grid and Cloud environments. The paper titled “A Security Framework for Dynamic Collaborative Working Environments” by Matthias Assel, Stefan Wesner and Alexander Kipp (DOI:10.1007/s12394-009-0027-1) presents the application of the Grid-related security concepts into collaborative working environments and results in a security model that enables dynamic, trust-enabled and secure collaborations. Within this context, scenarios from the health and the engineering domains offering real-world experience are described. The paper titled “Delegation of Access Rights in Multi-Domain Service Compositions” by Laurent Bussard, Anna Nano and Ulrich Pinsdorf underlines that delegation of access rights across trust domains will become essential in service composition scenarios. The authors propose a framework supporting abstract delegation that harmonises the management of heterogeneous access control mechanisms and offers a unified user experience independent of these mechanisms.

In the paper entitled “Quantifying Privacy in Terms of Entropy for Context Aware Services” (DOI:10.1007/s12394-009-0026-2) Athanasios S. Voulodimos and Charalampos Z. Patrikakis propose a framework through which the users of Location Based Services are able to configure the level of privacy they wish according to the desired balance between privacy and quality of services offered. They use entropy as a means of measuring the capability of locating a user’s whereabouts and identifying personal selections. In the paper entitled “Information Exchange in Business Collaboration using Grid Technologies” by Fotis Aisopos, Konstantinos Tserpes, Magdalini Kardara, George Panousopoulos, Stephen Phillips and Spyridon Salamouras (DOI:10.1007/s12394-009-0028-0), the authors describe a novel Grid-based Anti-Money Laundering (AML) system, which allows for trusted, secure and efficient communication of appropriate information among banks in order for money laundering activities to be detected. Their research approach focuses on identity management and trust establishment, and more specifically Service Level Agreements (SLAs).

The basis of the presented research of authors of the paper “Trusting third-parties storage providers for holding personal information. A context-based approach to protecting identity-related data in untrusted domains” by Giulio Galiero and Gabriele Giammatteo lies on the encryption of data before they are uploaded to an untrusted domain. In this paper the authors further extend this approach by introducing dynamic adaptation of the encryption process through the EncryptMe tool.

This special editorial issue also includes the paper titled “Federated Identity Management in Mobile Dynamic Virtual Organizations” by Matteo Gaeta, Juergen Jaehnert, Kleopatra Konstanteli, Sergio Miranda, Pierluigi Ritrovato and Theodora Varvarigou which presents the identity management mechanisms developed within the context of a Mobile Grid infrastructure.