Research And Realization Based On The Techniques Of Grid Security

Grid is a new technology based on Internet, I t is the sharing of resources which includes calculation, storage ,software, information and knowledge. However, the information network lined to Internet is confronted with various invasion which threatens the safety of the network, In recent years, the study and prevention of the network security have been probed further, the technology and safety measures are mainly firewall, IDS(Intrusion Detection System), Encryption , safe insulation, VPN (Virtual Private Network) and so on . Grid is in the environment of heterogeneous ,which is the dynamic integration of different resources and services covering multi managing fields .Grid is about the usage of the resources ,the complex communication structure and rigid functional requirement ,so the security of Grid environment is an essential key problem . Grid system has to ensure the services and safety mechanism of internet and it has to extend various kinds of safety functions which mainly includes certification ,access control,confidentiality,integrity,private and anti-denial .This article discusses the safety policy and measures of Internet and technological drawbacks ,.Based on these problems, this article roughly states the safety problems. and safety requirement of Grid environment and illustrates the safety policy and design of Grid. .It also analyzes the optimum method applied to. Grid safety. It uses the Globus development platform , designs and realizes the safety system of information service platform .It establishes safety certification system and realizes the functional performance of information service, It demonstrates the feasibility of system design .The safety problems of Grid environment are: 1. Integrity 2. collaboration 3. trust relation. Specifically speaking,, the safety problems can be classified into three kinds::1. Integration of present systems and technique;2. collaboration of different main frame computer;Trust relation of interacted main frame computer; Integrity of technology:: It is impossible to expect a certain safety protection technique to solve all safety problems whether for technique reasons or some other reasons .Grid safety system need to be trans- formed to the integrity of cross-flatwork, cross-main frame mode of the present safety system. This means the system can be realized through the present safety mechanism (for example: koreros, PKI) and it also can have the feature of extension and integrity.Collaboration work: The ability of collaboration is mainly shown from the following layers: Protocol layer: it needs the me mechanism of exchange information between fields which can be obtained by SOAP/HTTP. Policy layer: every party involved must illustrate the policy it desires in detail . Identification layer: It needs the mechanism of identification of subscribers in a certain field from another field. If must realize map of identification and trust. If can be finished by proxy server or trust proxy. Trust relations: Grid service needs multi safety areas, so the trust relations are very complicated, it needs configuration of dynamic and controlled by users and the management of instant service.The present safety standard and mechanism can't meet the demands of Grid, so in order to meet the needs of Grid and make full use of present standard and techniques, we should establish the safety systematic structure of Grid layers. The purpose of it is to set up a framework of layers which includes Grid safety strategy, service, protocol and their relations and to set up GSI( Grid security Infrastructure )using the safety protocol and service model, protocol and mechanism. In a word, We should establish Grid and safety system in order to meet the demands of Grid and make full are of the present internet standard and technique.Globus is the realization of Grid and the standard of facts. Globus puts forward GSI to provide safe certificatio...