基于特定网格计算环境的信任管理模型  

Trust Management Based on Certain Grid Computing

作　　者：徐开勇[1] 徐宁[1] 

机构地区：[1]信息工程大学电子技术学院,河南郑州450004

出　　处：《武汉大学学报（理学版）》2009年第1期1-6,共6页Journal of Wuhan University:Natural Science Edition

基　　金：国家高技术研究发展计划(863)项目(2006AA01Z433)

摘　　要：基于信任管理引擎的信任管理模型,提出了信任管理是信任意向的获取、评估和实施的新定义,并应用于已有的一个新型网格安全信任体系架构(NGST)中,将网格环境划分为多个自治域,每个自治域由一个信任代理处理本域所有信任关系的问题.在此环境下建立了域内信任管理模型,给出了安全性的形式分析与证明,利用凭证访问策略来保护协商双方的安全凭证中的敏感信息.结果表明,本文提出的信任管理模型是安全的,具备很好的自治性,并且能有效地将不良行为较多实体逐出自治域.Based on TME model, this paper introduces the concept and definition of trusted management and defines it is the getting,evaluating and implementing of trust intention.The trust management model in terms of this definition is applied to an existing new pattern grid security trusted infrastructure—NGST dividing the grid environment into multiple self-ruled domains,each having a trusted proxy to deal with all the trust relationship issues in the specific domain.Then the paper describes the inner-domain trusted management that can protect sensitive information in security credence by Credential Access Policy.Finally,the paper analyzes the security of this method by automata syntax,and proves that the new model is secure,well-self-ruled,and can dispossess from self-ruled domain the entities that have some improper actions.

关 键 词：网格 信任管理 行为信任 身份认证 可信计算 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]