Information Service Grid Security Research & Practice

Numerous grid resources distribute in different trust domains, running on different platforms and systems, using different security mechanisms. It's very important to ensure security interoperation under the grid environment. A secure model oriented service grid has been proposed, which is coupled with Web services security and open grid service architecture (OGSA) security technologies. HowH information processing platform prototype system emphasize particularly on the research of the banding layer security of the secure model, and realizing the security communication to ensure mutual information security.HowH platform is based on the public key infrastructure (PKI). Under the grid environment, PKI can meet the authentication of user's identity better, and help to build the trust model. Considering the composition characteristic of the grid environment, a distributed trust model based on "organization" has been proposed, which is coupled with the advantages of strict hierarchy of certification authorities model and distributed trust architecture model.Under the grid environment, messages travel from the originator to the ultimate destination, potentially by passing through a set of intermediaries and many kinds of chains along the message path. Grid services are based on simple object access protocol (SOAP). So, it's necessary and possible to realize massage level security to ensure end-to-end security communication. Considering of the real-time requirement and QoS of HowH platform, different security levers based on security policy have been designed. Using special security level can only protect the given user's sensitive information, to reduce the security expenses and meet the real-time requirements.There are three kinds of security communication modes in HowH platform: transport layer platform security, message layer platform security, and program-defining security. Under concrete grid environment, using different security modes together will help to meet the concrete security requirements. Use the security policy can define different security level to meet the different security requirements.