RBAC授权策略在网格环境中的优化

分析了网格安全基础设施授权过程和存在的问题,根据网格动态性、自主性与多重管理特点提出了基于角色、能够解决大规模虚拟组织授权问题的方案,实现了虚拟组织用户有效管理与细粒度授权,完善了本地资源授权策略,为虚拟组织的安全运转提供了保障。根据网格体系结构特点,新模型改进当前存在的RBAC授权机制,从整体和局部两个方面完善了系统,为降低网格系统成本、快捷实施、增强安全性提供了一条新的解决方案。

Research on the Optimization of RBAC Authentication Policy in Grid Environment

A new role base access control (RBAC) based authentication model which can resolve virtue organization (VO) authentication problem in large scale is proposed. The new model provides security to grid system in two aspects:firstly it makes user management and authentication more precisely, secondly, it reinforces authentication strategy at local level. According to the characters of VO in the Grid, we need a new solution to relieve burden of security, hence the optimized authentication architecture is built to achieve the better performance as well as reduction of total cost of ownership.