The Research And Design Of A Flexible Grid Certificate Authority Architechture

Grid is a new technology, which will be very important in the future, and Grid security is the key research of Grid. Whether Grid could be used widely in the future depends on Grid security. Grid certificate is the emphasis in Grid security. Grid certificate prevents the data transported in the Grid from being tampered by any means. It is the key to ensure data security in Grid.This thesis analyses the key technology in Grid certificate and the most common used X.509 certificate system. What's more, it analyses widely used Certificate Authority architechture, and discusses the function of every module.Since the modules of the former Certificate Authority architechture coupling with each other heavily and are not so flexible, this thesis designs a flexible Certificate Authority architechture. It preserves most of the function of the former system, and considered the software architecture to divide the system into Certificate Authority business process and Certificate Authority management process.The flexible Certificate Authority architechture is based on the message and rule mechanism, i.e. ECA rule technology. When an event is done, the relevant message is send, and then the responsible rule is matched, and the correlative action is carried out. Base on this mechanism, the flexibility and reliability of the system is enhanced.The flexible Certificate Authority architechture designed in this thesis reduces the coupling of the modules of the former system, and emphasizes the reuse of the modules. It matches the standards of the software component. The flexible Certificate Authority architechture also designs uniform interface for the users. It makes the system more logical and architecture is more reasonable.