The Research Of Digital Library Security Certification Infrastructure Under Grid Environment

This article takes a further research on security certification system, basing on investigation of the present development condition of digital library around grid environment. It has been finished a particular analysis on popular GSI security certification system and PMI multi-level access control model. And then it has been put forward a complete access security control policy for digital library that offers a series of security solution, including user virtual organization, distributed CA, multi-server instances security deployment.Basing on these solutions, it achieves the security model deployment for digital library, dividing the whole disposal into 3 layers that named user interface, security middleware, and security resource server, using OGCE security portal and MyProxy security user proxy as middleware model. Then it achieves the single sign on process for terminal user and mobile user.Further, it also optimizes the security model. In addition, it imports the private-key trusteeship mechanism into grid security. And then it transforms the security problem into a more safe authorization management all by server, from former simple user OS security or artificial keeping.