一个具有强授权特性的网格安全框架

网格安全技术主要解决网格环境中实体之间的认证和授权问题。Globus网格项目中的GSI(Grid Secudty Infrastmcture)主要基于X．509技术实现身份认证以及数据的机密性、完整性和抗否认性，重点解决了认证和消息保护问题，然而在授权问题上缺乏必要的技术支撑。在分析现有安全技术的基础上，提出了将基于X．509的PKI技术和PMI技术相结合的网格安全框架，旨在实现基于安全认证基础之上网格用户和虚拟群组实体间的安全授权机制，从而构建强认证、强授权的网格安全基础设施。

Enhanced strong authorization grid security architecture

Authentication and Authorization are the main concerns in the research of grid security technology. GSI of the Globus Project proposes a grid security infrastructure based on X.509 to provide authentication, data confidentiality, integrity and non-reputation. It focuses primarily on authentication and message protection, while lacking strong support for delegation and authorization. Several popular security solving schemes were analyzed, and a scheme based on the combination of PKI/PMI of X.509 standard was given, trying to enhance the authorization mechanism between the grid users and subjects of virtual organizations, hence to construct more secure grid security infrastructure.