网格环境中跨异构域身份鉴别系统的研究与实现  

Research and Implementation of Identity Authentication System Crossing Heterogeneous Regions in Grid Environment

作　　者：罗琛[1] 李沁[1] 马殿富[1] 

机构地区：[1]北京航空航天大学计算机学院,北京100083

出　　处：《计算机工程》2005年第22期67-69,112,共4页Computer Engineering

基　　金：国家自然科学基金资助项目(90412011);国家"863"计划基金资助项目(2003AA144150)

摘　　要：针对跨异构域的身份鉴别问题进行研究,设计并实现了一个身份映射和信任证转换系统CredFed(CredentialFederation),解决了分别使用PKI和Kerberos作为鉴别机制的异构域之间身份鉴别的问题。CredFed是目前唯一在网格环境中解决此问题的系统。CredFed被设计为具有良好的互操作性和可扩展性的系统,使其不仅适用于网格环境,也适用于面向异构域的大规模分布式系统。该文对国内外相关工作作出了比较,简要地介绍了CredFed在CROWN网格安全平台中的应用并给出了实验结果对系统性能作出评估。Researching on identity authentication crossing heterogeneous regions, designing and implementing an identity mapping and credentials converting system CredFed（credentials federation）, resolving the problem about identity authentication of di-direction between the heterogeneous regions one of which employs the PKI mechanism and the other one employs the Kerberos mechanism. The CredFed is the only one in the world to resolve that problem. The CredFed is interoperable and flexible, the design of which not only can be used in grid environment but also in large scale distributed systems. This paper compares the CredFed with the related works in the world, briefly introduces the implementation of the system in CROWN project, finally gives the results of experiments testing the performance of the CredFed and evaluates this system.

关 键 词：网格 异构域 PKI KERBEROS 鉴别 信任证 安全会话 信任证转换 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]