摘要
针对跨异构域的身份鉴别问题进行研究,设计并实现了一个身份映射和信任证转换系统CredFed(CredentialFederation),解决了分别使用PKI和Kerberos作为鉴别机制的异构域之间身份鉴别的问题。CredFed是目前唯一在网格环境中解决此问题的系统。CredFed被设计为具有良好的互操作性和可扩展性的系统,使其不仅适用于网格环境,也适用于面向异构域的大规模分布式系统。该文对国内外相关工作作出了比较,简要地介绍了CredFed在CROWN网格安全平台中的应用并给出了实验结果对系统性能作出评估。
Researching on identity authentication crossing heterogeneous regions, designing and implementing an identity mapping and credentials converting system CredFed（credentials federation）, resolving the problem about identity authentication of di-direction between the heterogeneous regions one of which employs the PKI mechanism and the other one employs the Kerberos mechanism. The CredFed is the only one in the world to resolve that problem. The CredFed is interoperable and flexible, the design of which not only can be used in grid environment but also in large scale distributed systems. This paper compares the CredFed with the related works in the world, briefly introduces the implementation of the system in CROWN project, finally gives the results of experiments testing the performance of the CredFed and evaluates this system.
出处
《计算机工程》
EI
CAS
CSCD
北大核心
2005年第22期67-69,112,共4页
Computer Engineering
基金
国家自然科学基金资助项目(90412011)
国家"863"计划基金资助项目(2003AA144150)
关键词
网格
异构域
PKI
KERBEROS
鉴别
信任证
安全会话
信任证转换
Grid
Heterogeneous regions
PKI
Kerberos
Authentication
Credentials
Secure conversation
Credentials converting
