The Research Of Security Architecture And Credential Management For Grid

The Grid Computing concerns more security problems than any other common problems that security related, a lot of new security problems have appeared in the grid environment. The traditional technology of network security can not solve the problems of grid security well, so the research of grid security has become a very important, complex and tough job.The grid security architecture and the grid credential management technology are described systemically in this paper. First of all, the technology about the grid security is introduced. Through the analyze of the Globus's GSI and the grid security architecture based on OGSA, combining with the hierarchical protocols of the Internet and the hierarchical architecture of the grid, a kind of the hierarchical grid security architecture is constructed and another improved grid security architecture is expounded. In this new architecture some disadvantages are solved, such as too strong coupling between the grid security architecture and the grid architecture which is applied now, the function of the security components work independently and lack of the support of the transparent service, etc. The design traget is to provide the security function as a service to user, all the services will be avaliable when users need and call it.Then for the existing grid credentials management technology mainly includes the online CA and the online credential repository, we analyze and compare the two methods based on the analyzing of the grid credential management technology, the MyProxy online credential repository and a typical grid credential service system are introduced too. Finally, the prospect of the grid credential research direction is discussed.