基于社区的服务网格多粒度授权与访问控制研究

Research of Community-based Multi-Grained Authorization in Service Grid

基于社区原理构建的织女星网格操作系统(VEGA GOS)是网格应用开发、运行和维护所依赖的环境和平台。在织女星网格操作系统中,结合社区具有的局部集中性的特点,在主体、资源、操作空间中建立跨管理域的授权模型,用于解决网格中授权及访问控制在好用性、自主控制、通用性方面的问题。介绍了基于社区的多粒度授权与访问控制机制的设计和实现,并对由于使用安全机制引起的系统稳定性变化进行了测试和分析评价。

The Community-based VEGA Grid Operating System（ VEGA GOS） is an environment and platform that support development and running of the grid applications. Combining with community that centralize the user and resource locally, we form a cross domain authorization model in subject, resource and operating space to solve the issues of versatile, autonomous control and easy-to-use in grid environment. This paper introduces the design and implementation of the community-based multi-grained authorization and access control mechanism ,and take a measurement and analysis to the performance penalty due to the use of security mechanism.