基于PKI和PMI的网格授权机制的研究  

STUDY OF PMI AND PKI-BASED AUTHORIZATION SCHEMA IN GRID

作　　者：王德民[1] 温子彦[2] 刘昕[1] 朱虹[2] 胡平[3] 

机构地区：[1]吉林大学网络中心,吉林长春130012 [2]吉林大学计算机科学与技术学院,吉林长春130012 [3]吉林大学车身与模具工程研究所,吉林长春130012

出　　处：《计算机应用与软件》2007年第12期36-37,56,共3页Computer Applications and Software

基　　金：国家杰出青年科学基金(10125208)

摘　　要：目前网格授权问题的研究只实现了粗粒度的资源访问控制,资源的访问控制权在资源本地。针对以上缺点,在设计了一种通用网络组织模型的基础上,结合PKI(Public Key Infrastructure)、PMI(Privilege Management Infrastructure)以及信息服务,构建了适合网络环境的网络权限管理和授权服务基础设施GPMI,把资源的访问控制权交给资源提供者,实现资源访问控制的集中管理,同时实现了细粒度的资源访问控制,为网格中的计费等跟踪工作提供了基础。The existing authorization schema in grid has only realized caurse-grained resource access control. The right of the access control belongs to the hosts that provide the resource. To resolve the drawback, firstly a common grid organization model is designed, and then a grid privilege management and authorization service infrastructutre GPMI based on PKI, PMI and information service is constructed. In the grid privilege management and authorization service infrastructure, the right of the access control belongs to the resource suppliers, and the access control is managed concentratedly. Also a fine-grained resource access control is realized which provides the foundation for the trace work in gird such as cost counting.

关 键 词：属性证书 代理证书 授权服务 访问控制 GPMI 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]