网格环境下安全认证模型

网络安全认证技术应用最广泛的是Kerberos认证机制和基于X.509证书的认证机制,两种机制都无法直接单一地应用在网格环境下,设计一种层次域的认证模型,将网格环境分为3个层次信任域.主要解决如何将X.509证书转化为Kerberos票据的问题,提出一种协议密钥独立于用户口令的密钥生成方式,最后通过实验和理论分析,来验证改进的方案安全性.

Under the Environment of Grid Security Suthentication Model

Network security authentication technology most widely used is the Kerberos authentication mechanism,and X.509 certificate-based authentication mechanism.But neither of these mechanisms are not direct a single application in a grid environment,the design of a hierarchical domain authentication model,the grid environment is divided into three levels of trust domain.Mainly to solve the problem of how the X.509 certificate into a Kerberos ticket.Proposed a protocol key independent of the user password key generationmethod,and finally through experimental and theoretical analysis to validate theimproved Scheme security.