Study And Implement Of Pivotal Craft On China Meteorological Application Grid Portal

CMAG(China Meteorological Application Grid) is supported by the High Performance Computing and Core Software, which is one of the major projects under 863 Program. The main purpose of project CMAG is to create R&D environment of weather forecast by grid technology, and to share high performance computing resource, meteorological observed data and software resource inside Weather Bureau.The User Management System of CMAG portal is an important part of meteorological application grid, and it is developed to provide uniform management of CMAG user and secure access control of CMAG portal, and ensure legal use of grid resources. Its goal is to realize security access control of the whole CMAG.Seeing that the security demand of grid computing environment and the security tactics of GSI, the user management of CMAG not only include user authorization in grid portal, but also manages grid users' privilege on lots of grid nodes. And it also privides support for security certification between users and grid nodes.According to the function needs of user management system of CMAG portal, firstly, we studied the security demand of grid environment, GSI security statics and security proxy technology. Then we propose double-deck privilege control statics to realize user management system of CMAG portal, which solves the problems of user authorization management in grid portal and numerous grid nodes, and research the user management of CMAG and design the architecture of it. According to this architecture we divide user management system into two parts: user authorization management system and grid digital certificate management system. The latter offers essential support for security certfication between the users and grid nodes.In our user management system, user authorization management system adopts RBAC technology, the grid digital certificate syetem uses the public key infrastructure (PK.I) and simpleCA security statics, and based on portlet technology and Myproxy technology we realize the second level of the double-deck privilege control. Finally we realize the User Management System of the whole CMAG.