Based On The Gsi Database Grid Security Infrastructure,

The move towards supporting more distributed and autonomously managed database grid systems, where databases are integrated temporarily to solve particular science or industry problems, creates new security challenges. This thesis argues that the answers should combine the use of Grid Security Infrastructure, which is proposed to solve secure problems in computational grid environment and offering multisite authentication, with existing security mechanism in DBMS products, and new technology in authorization, authentication and trust etc. We have developed a security infrastructure that meets these requirements: the Database Grid Security Infrastructure (DGSI), which extends GSI to offer secured authorization, authentication and trust for database grid.This thesis begins with the analysis of security requirement in the process of database resource sharing and collaborating in the dynamic and open grid context, and proposes the concept of Database Grid Security Infrastructure, based on a combination of the current means of security assuring in grid context and data-resource centered information sharing. Database Grid Security Infrastructure (DGSI), compatible with the existing Grid architecture specification OGSI/WSRF and Web Service Security Standards and Specifications, is a security infrastructure oriented to the database grid environment. With a backbone on several security protocols, Database Grid Security Infrastructure (DGSI) offers solutions to a series of database grid security problems, such as authorization, authentication and trust. This thesis introduces the principle of Database Grid Security Infrastructure (DGSI), describes its layered architecture and defines the security rules on the database grid in form of protocols. The key effort of this thesis focuses on the Database Grid Security Infrastructure (DGSI) protocols, which are intended to provide a set of reference specification for security issues in database grid environment. This thesis also describes design and implementation of a prototype system named Dart-DGSI, which conforms to the Database Grid Security Infrastructure (DGSI) protocols. Finally we introduce an application scene.