Secured Communication And Access Control System Based On Grid Services

The Grid provides users with large-scale, distributed grid services, which greatly meets the users'need for resources and services. Security is one of the most important issues for grid services. Secured communication and access control system based on Grid Services aims to provide confidentiality ensurance, as well as meet the requirement of authorization, for grid services.HTTP-based SOAP message is used for the invocation of grid services. Message exchanged among grid services is secured. The system firstly uses signature, verification, encryption, and decryption handler separately to intercept and capture soap message, and invokes XML parser to treat SOAP message, which makes the system easy to configure and protect grid services.Grid service based access control mechanism is used to provide access control for various services deployed on the grid environment. Based on the secure protection on messages delivered among services, access control mechanism is bound to the composite services. Composite status manager is used to handle composite status. Composite status conversion algorithm, workflow preauthorization and status convert technology are used to ensure the synchronization of authorization flow and execution flow.Functional test against the system on SOAP message protection proves that the system can protect SOAP message on demand. Performance test, compared with WSS4J, using SOAP message with many nested children, proves that the encryption speedup rate is 1.05~1.40, the signature speedup is 1.20~2.00, and the system can provide the synchronization of authorization flow and execution flow, regardless of the effect of message delay and workflow node number.