网格中的分布式授权框架研究  

Study of distributed authorization framework in grid

作　　者：姚红岩[1] 李明楚[1] 

机构地区：[1]大连理工大学软件学院,辽宁大连116621

出　　处：《计算机工程与应用》2007年第30期11-14,29,共5页Computer Engineering and Applications

基　　金：国家自然科学基金(the National Natural Science Foundation of China under Grant No.60673046;No.90412007)。

摘　　要：对网格中的授权概念及授权过程涉及的主要理论模型和算法参数,进行全面地阐述,然后给出一个网格的分布式授权框架,框架对授权按层次划分为信任管理、策略管理、权限管理、授权机制与协议管理,授权请求管理,对各层分工也有明确描述。结合当前信任管理概念与框架的对比分析,表明框架的功能划分使各层实现技术的研究更具针对性,同时便于从整体上把握授权各环节,理顺建立授权机制的思路。The paper explores deeply on authorization in grid with respect to some key concept,including authorization parameters,authorization sequence and authorization model,then proposes in theory a framework for distributed authorization.Framework divides authorization into five parts.They are called in turn the trust management,policy management,privilege management,authorization mechanism ＆ protocol management and authorization request management.Each part＇s function is also prescribed.Not only this framework makes technology development for each part is more specific, but also clarifies the way of establishing concrete authorization mechanism.

关 键 词：网格 授权 策略 授权框架 网格安全 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]