基于身份的网格安全体系结构研究

Research on ID-based Grid Security Architecture

为了克服PKI证书机制对GSI规模化发展的制约,在分析GSI中证书机制局限性的基础上,将HIBC引入到GSI中,使用HIBC签名方案代替GSI中的PKI数字签名并进行扩展,提出一种基于身份的网格安全体系结构IBGSI(ID-based GSI),进而给出了结合HIBC方案改进TLS握手协议的方法,并通过一组协议控制下的实体交互过程定义IBGSI的协议结构。从分层身份结构、认证结构和协议结构三个方面对IBGSI进行了研究,研究结果表明IBGSI融合了GSI与IBC的优势,能够重用GSI的安全服务且便于部署,并获得IBC轻量、高效的优点。

In order to improve the scalability of GSI which is restricted by PKI s certification mechanism,a grid security architecture named IBGSI(ID-Based GSI) was proposed,in which PKI signature scheme was substituted by HIBC signature scheme.Furthermore,TLS handshake protocol was improved to fit HIBC scheme.At last,IBGSI s protocol architecture was defined by designing a set of entity interaction operation sequences.Three aspects of IBGSI,hierarchical identity architecture,authentication architecture and protocol ...