使用XKMS的开放式网格服务的证书验证方案

Certificate Validation Scheme of Open Grid Service Usage XKMS

当前,通常使用基于SSO的PKI作为网格的安全体系架构。但在面向网格的结构中,因为需要支持终端用户SSO和动态瞬间服务,所以安全体系结构的信任关系很难建立。本文讨论一种应用XMLWebService安全技术实现的开放式网格服务安全架构,重点论述开放式网格服务中使用XML的安全技术(XKMS、SAML及XACML)来实现证书验证的过程。

Current Grid Security Infrastructure Using PKI Based on SSO(Single-Sign-On). Trust is hard to establish in a service-oriented grid architecture because of the need to support end user SSO and dynamic transient service. This paper describes a security approach on OGS using XML Web Service security and validates certificate using XKMS and SAML, XACML in XML Security.