支持OGSA的网格安全基础设施研究和改进

《支持OGSA的网格安全基础设施研究和改进》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、浙江工业大学硕士学位论文支持OGSA的网格安全基础设施研究和改进姓名：马珂绛申请学位级别：硕士专业：计算机应用技术指导教师：蔡家楣20050501浙江工业大学foi{Ij研究生学位论义嘲格立牟环境支撑’严台模型的研究年n改进增强ResearchandImprovementofGridSecurityInfrastructureSupportingOGSAABSTRACTGridisaglobalsolutiontoaddresstherequirementsofmoreandmorecomputingability．Gr

2、idisdifferentfromtraditionalnetwork．Computingresourcesandusersaredistributedinagridisdynamic．Avirtualtrustrelationshipmustbeestablishedanddestroyeddynamically．ThevirtualtrustrelationshipneedtObreakthroughthelocationofgeogmphNthemeansofshareorcooperation，andconstr

3、alnsofusingcomputationalresourcesineachindependentsecuritymechanism．Gridcomputingsystemwillhelppeopletosolvemanyproblemsthatcouldnotbesolvedpreviously．Itisanewway,looserandmoreconvenient．Incontrasttotraditionalnetworkenvironment，鲥denvironmentshaveabroaderrangofse

4、curityrequirements．Howtoshareresourcessafelyinadynamic，interdomalnanddistributedcomputingenvkonmenLandhowtointeroperatewith，ratherthanreplaceandmodify,thosesecuritymechanismsisagreaterchallengeforgridcomputingsystem，andisalsotheprincipalproblemofthesecurityenviro

5、nmentplatformforgrid．GridSecurityInfrastructure(GSI)istheimplementationofexistinggridsecuritysolutionofOGSAinGlobusToolkit．BasedonGSIandadvancedinforrnationsecuritytechnologies，thispaperpresentsseveralopinionstoimproveandstrengthenthesafety,flexibilityandpractica

6、bilityofgridsecurity．Intheaspectsofprotocols，trustmodelandsecurityinfrastructure，performanceofgridsecurity，themechanismofauthorizationandthemanagementofproxycertificationareimproved．1．InordertoenhanceperformanceofMutualAuthenticationbetweentwoentities，certificate

7、sCachingisimportedtoexpandWebServicesSecurityprotoc01．2．Role-basedmulti-identitiespartialprivilegedelegationtrustedmodelisintroduced．Role—basedauthorizationmappingCanbesolvedinaninterdomancomputingenvironment．Identity—mappinginGSIisreplacedbysecurityoperation-ori

8、enteddelegation．Correspondingarithmeticofsecurityoperation-orienteddelegationisputforward．(Role—basedcredentialmappingandaccesscontr01)．3．ACredentialWalletserv