Naming Data for Efficient, Secure Archival Retrieval

摘要

The NOAO Science Archive (NSA) will provide secure access to proprietary data by validating users against access rights. Its service-based, geographically distributed architecture separates metadata fromthe raw images, so access rights must be intelligible to the local DataService. They must also be compact, user-friendly (human-readable) andcryptographically secure. Most of these requirements can be met with a simple hierarchicalscheme, similar to file paths, but this is open to forgery by malicioususers. Appending a short Message Authentication Code (MAC) protectsagainst such attacks. The result is a compact, simple, secure solution that fits nicely withinthe IVOA identifier framework.