摘要
随着网格技术的出现与应用,其安全问题也已成为人们研究的重点。网格操作系统Globus的安全体系架构GSI(Globus Security Infrastructure)提供了单个认证域下安全问题的解决方案,但基于网格的广域特性,如何解决其多个域间的安全认证是目前亟待解决的问题。首先简单介绍了GSI的安全认证机制,然后在此模型基础上引入域间映射的思想,提出了一种用于多个认证域间相互认证的方法,完善了网格环境中的安全认证机制。文章最后详细介绍了该方法的实现过程。
With the appearance and application of Grid technology,the security problem becomes the emphasis of grid research. Globus Security Infrastructure（a security component in Globus） provides us a solution in single authentication domain.Currently, how to resolve the authentication across domains is the most important security problem in the large-scale grid.In this paper,anthentication mechanism of GSI is introduced firstly.Then,the multi-domain authentication method based on mapping is proposed. Grid security performance can be improved by this new mechanism.High-level implementation of this new mechanism is shown in detailed at the end of the oaoer.
出处
《计算机工程与应用》
CSCD
北大核心
2007年第5期130-132,195,共4页
Computer Engineering and Applications
基金
江苏省自然科学基金(the Natural Science Foundation of Jiangsu Province of China under Grant No.BK2004218)
江苏省高校自然科学研究计划项目(the Natural Science Research Project of Higher Education of Jiangsu Province
China under Grant No.05KJD520144)
南京邮电大学"攀登计划"资助项目
关键词
网格
网格安全体系架构
多域认证
映射
grid
globus security infrastructure
multi-domain authentication
mapping
