Research Of Hierarchical Identity-Based Encryption For Grid

Grid is information application service which serves users like a supercomputer by means of using geographically widely distributed computation resources,storage resources,network resources,software resources and information resources etc. Grid technologies have extensive perspective and development scope, but researches concerning it are still on the first step. There are many key technologies which need to be solved. On one hand, the powerful functions Grid technologies can bring great convenience to scientific researches, on the other hand, much attention must be given to the security of the network applications so that information won't leak or stolen while using the fast and convenient functions and services.Grid security as the first line of defense, and it is also the most important line of defense,so encryption technology generally a cause for concern. Grid security is based on the PKI certificate X. 509 mechanism. However, in the PKI system, as a public key and certificate forms through the bundled together, the number of users on the number of certificates required, users of the public key used in a certain period of time to preserve, key production, cancellation, storage certificate problems with the credibility of the management and distribution of large-scale environmental problems, and so on certification agencies are extremely onerous burden, there will be an ever-growing infrastructure to support. The result is grid limited scale, grid and runs counter to the original intention of designing.Aiming at these problems, this thesis studied IBE system deeply, which focused on the study of hierarchy of IBE system for Grid mainly, the work as follows.First of all, based on the identity and certificate-based encryption system of the basic conditions and framework for the analysis of the characteristics of the two encryption system proposed in the use of grid-based public key certificate system is the biggest problem the management of the certificate, the certificate inside tied determining the identity of the user and the user's public key. The identity-based public key cryptography system, the identity of the user or users on the public key, the system only needs to establish credibility stage of the services do not require specialized directories stored certificates, greatly reducing the burden of management is based on certificate of public key cryptography system good substitutes.Secondly, based on BF-IBE programmers, from the hierarchical structure of encryption thinking, raised a safe based on the identity of the layered encryption scheme, and the programmer of security analysis, solution to the identity-based encryption of programmer Key produce an excessive burden on the central issue.Finally, the analysis of the grid services for distributed topology, and in these circumstances to improve HIBE programmer, a grid for the encryption algorithm GHIBE, and the programmer was analyzed.