一种面向网格计算的分布式匿名协作算法  

A Distributed Anonymous Coordination Algorithm for Grid Computing

作　　者：石志国[1,2] 贺也平[1] 淮晓永[1,2] 张宏[1,2] 

机构地区：[1]中国科学院软件研究所基础软件国家工程中心,北京100080 [2]中国科学院研究生院,北京100049

出　　处：《计算机研究与发展》2008年第z1期72-80,共9页Journal of Computer Research and Development

基　　金：国家自然科学基金项目(60673121,60073022,60373054);“十五”国家科技攻关计划基金项目(2005BA113A02)

摘　　要：基于TCG提出的可信计算技术为网格协作安全性提出一种匿名分组身份验证算法,该算法可以非常可靠地解决网格计算平台之间的身份匿名验证问题.算法使用一个硬件模块TPM解决远程的身份验证,并通过TPM机制可以提供可靠的匿名验证和平台认证功能.算法中所有涉及的验证过程都是基于匿名机制实现的,除了实现匿名验证机制以外,算法还提供一套完整标记恶意网络实体的方法.提出了网格计算中虚拟分组的匿名认证平台架构,并在此架构基础上分成5步实现匿名验证算法,然后说明了算法在一种对等计算平台的应用实例,与GT2,GT3,GT4以及信任管理进行安全性的比较,并设计一个实验评价其性能.A novel anonymous organization authentication algorithm for grid computing security based on trusted computing (TC) technology introduced by trusted computing group (TCG) is proposed, which can provide grid computing platform with efficient and reliable anonymous identification attestation. The mechanism of identification authentication is based on a hardware module, called trusted platform module (TPM). Including the anonymous organization attestation, the algorithm also gives a method of tagging the rogue grid entities. Architecture of virtual organization in distributed grid system is illustrated. The anonymous organization attestation algorithm is interpreted by five steps. After the detailed description, an example of the algorithm is given and compare the security mechanisms with GT2, GT3, GT4 and trust management. The results of experiment prove the sound performance and good security guarantee.

关 键 词：信息安全 匿名协作 网格计算 验证算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]