MSO and multiple communities

[Roy Williams]

What is there in the real world? There are credit cards!

A User may own several credit cards: Visa, Mastercard, Amex, etc etc.

Credit-card companies == Communities == Certificate Authorites. They
*authenticate* users -- meaning knowing who they really are. There are lots
of these already -- UK Grid, Verisign, Teragrid, etc etc.

A Service-provider may take some credit cards but not others. My service
will trust the Hungarian VO but not Astrogrid.

A Group (within a Community) is like the type of card that you have
(Platinum, Frequent-flyer miles, etc etc). That is what determines my credit
limit -- it *authorizes* expenditure.

The Warrant is like the temporary authorization that a hotel makes when you
check in. It allows you to order room-service without showing your
credit-card.


Roy


--------
California Institute of Technology
roy at caltech.edu
626 395 3670