Research On Grid Security Architecture

With the development of the human application requirements towards high-performance, diversity and multifunction, lots of large-scale science computing urgently needs a "virtual" super computing system which composed of multiple machines, system and scientific instruments. All these applications require those distributed, isomeric computing resource combined by high-speed network to accomplish computing problem.At the same time, with the development of Internet technique, all kinds of high performance all over the world can be connected by Internet. We will obtain a giant global high-performance, concurrent computational environment if these resources are coordinated.Before the appearance of Grid, it's a very difficult thing to use these distributed, isomeric resources. Grid can resolve the problem. Grid technique is one of the most important things affected future. One of the largest advantages of Grid is that it can share these computing resource and data resource, while the share must be safe. The idea of having a grid appealing to some entities because of the risk of being associated with eh motion of "sharing" resources or services. Because of the sensitivity and the vitality of data or information, such entities prefer to use their own" closed box 'resources. To main Grid computing more appareling, security must be addressed where an entity can use resources or deploy services safely. Grid security is the core issue of Grid system. The research on Grid system security becomes the hot and hard spot.This dissertation focuses on security problems, security requirements, security policy, and security architecture and security solution under Grid environment. A new security solution aiming at the current Grid environment will be proposed after fully analyzing the Globus's GSI security architecture. All of below is the main work researched in this dissertation.1. The Grid basic concept, connotation and characteristicsThis dissertation analyzes the Grid arising cause on the view of history, describes the basic concept, purpose and requirement of Grid, then analyzes the contribution to our society by deploying and applying Grid infrastructure. This dissertation also analyzes the arising of Grid is inevitable of the development of science, technology and society requirement. And at the same time, this dissertation analyzes the Grid characteristic of Grid by comparing with the current network.2. Summarize and analyze the former Grid architecture and the current Grid architectureFive tier hourglass architecture and Open Grid Service Architecture are the most typical Grid architecture. Five tier hourglass architecture reprints the first development of Grid architecture. OGSA architecture is the most widely accepted Grid architecture today. This dissertation analyzes the architecture, characteristic and the trend of Grid.3. Analyze the main security contents on Grid environmentAs we know, there are lots of different characteristic about Grid comparing with the traditional network. Grid needs more security requirement than traditional network. We must explicitly point out the key security question and technical problems. This dissertation analyzes the main security contents of Grid environment.4. Analyze the characteristic, advantage and disadvantage of the current Grid securityThere are respective security solutions to five tier hourglass architecture and OGSA architecture. Unfortunately 100 percent security is impossible to attained, no solutions can fully solve security problems, maybe. But these solutions can't fully solve these security problems on Grid. This dissertation analyzes the architecture, advantage and disadvantage of the Grid Security Infrastructure which is the main security solution on Globus system. At the same time, this dissertation also analyzes the security architecture of the Advanced Computational Infrastructure the Advanced Computational Infrastructure's security architecture which is the typical Grid in China.5. Research and design a new Grid security architecture modelA more comprehensive and flexible security architecture model of Grid system has been proposed on basis of explosion of GSI (Grid Security Infrastructure) adopted by Globus. Compared with GSI, resource mapping and management have been improved in the new model.