Research Of The Security Problem And Strategy In Grid Environment

In recent years,with the rapid development of Internet and the growing demand of applications,we are facing massive information resources,but,we can not get effec- tive resources which we need.Thus,the concept of grid computing appeared.Built on the existing Internet, Grid adopts standard,open and common protocols and interfaces, coordinates the use of distributed rexources,and provides non-trivial quality of service for users. Due to grid characteristic of large-scale, high-speed, distributed, heteroge- neous, dynamic,extensible,compared with previous network environments,there is a higher demand for grid security.Grid security has always been a hot issue in grid research.Grid is an open enviro- nment,its essential characteristic is the sharing of resources,and it must provides conv- enient and efficient means of resources acquisition for various users,which must be to damage the security of grid environment.Therefore,enhancing security faces an enor- mous challenge in the grid environment。There must be a flexible and effective securi- ty strategy to protect the security of grid,the most common method is to build a safe grid anthentication system.The main research work and innovations in the paper includes:(1) Firstly,the paper introduces the basics of the grid,including:the concept and characteristics of the grid,the grid architecture,the grid security and its problems;then, studies the grid authentication in-depth and elaborates X.509 and Kerberos authentication mechanism,Grid Security Infrastructure(GSI) and MyProxy,which is an online certificate warehouse system.(2)Secondly,on the basis of the analysis of logical structure of Education Resources Grid and exsiting grid,the paper proposes an Education Resources Grid Authentication Model based on management domains.The model introduces the concept of mangement domain,which provides Education Resources Grid Authentica- tion Model good flexibility and scalability,while also simplifying implementation of the certificate service system and improving its operability.(3)Finally,to solve authentication problems for users in the management domain of Education Resources Grid,the paper designs and develops an Education Resources Grid Certificate Service System based on Web,which provides authentication security,certificate management functin,and convenient and friendly graphical user interface for normal grid users.Authentication security Problems can be solved.