Research On Security Authentication Mechanism In Grid Communication

Grid communication is a set of emerging technologies building on the Internet, which can integrate the resources in the different geographical regions to achieve the comprehensive sharing. The communication security is an important part because of the widely distributed grid resources. As the foundation of Grid communication security, research on the authentication and key agreement mechanism is one of the hot topics.The certificateless public-key cryptography (CL-PKC), which combines the advantages of the identity-based cryptography (ID-PKC) and the public key infrastructure (PKI), has some attractive properties which seem to align well with the demands of grid communication. In this thesis, based on the Shiyijuan's certificateless authentication and key agreement protocol, a new certificateless authentication and key agreement (CL-AK) protocol for Grid is presented, which fits well with the Grid Security Infrastructure (GSI) and provides a more lightweight key management approach for grid users. It authenticates grid members and to secure resource allocation to these members. Compared with the existing protocol, this protocol is more efficient, and has a higher security. The efficiency and practicality of new protocol are analyzed in this thesis. It is proved that the presented protocol provides perfect forward secrecy and known session-specific temporary information security plus all the other security attributes of authenticated key agreement protocols such as known-key secrecy and no key control. Moreover, the presented protocol can resist Key replicating attack.