Research On The Access Authorization And Authentication System Of Grid Resource Based On GT4

Grid computing, as a new type of distributed technology with wide application prospect, has its own security issue. In grid computing environment, the grid resources have some features that are different from resources of other systems, including resource heterogeneity, dynamics, autonomy and bipartite. These characteristics determine that the grid resources management system should hide the heterogeneity of resources, providing the unified resource access interface, hide the dynamics of resources, providing satisfactory service quality, respect the local management mechanisms and management strategies, review the users’requests for resource carefully, and ensure the security of grid resources and the vital interests of resource owners. All these require grid to maintain good management of resources, so as to provide better access control service, protecting resource from unauthorized use.First, it introduces the background of grid and the application problems it faced. Then it introduces related theories, describes Five-Level Sandglass Architecture, Open Grid Services Architecture, Web Services Resource Framework, and also describes OGSA security architecture and grid development tools GT4briefly. It analyses grid push sequence authorization architecture and authorization’s push sequence mode, pull sequence mode and agent sequence mode; a detailed study of the traditional grid authorization access control and role-based access control policy; analyses the current mainstream authorization system on the basis of preceding text. It studies designs grid authorization and authentication system based on the GT4in Linux systems. It first does the system functional requirements analysis,and then analyses and designs the main process, the main modules and functions, and the main database of the system. It builds grid laboratory environment with GT4, configures a CA Certification Center and builds GSI environment.It uses RBAC-based authorization mechanism for CAS and push sequence mode and gets the initial implementation of the authorization and authentication for users’access to grid resources with the example of book price query system services.