結(jié)合網(wǎng)格發(fā)展的需要，分析了當(dāng)前廣泛采用的Kerberos 身份認(rèn)證機(jī)制，研究了
不同網(wǎng)格環(huán)境下GSI 方案和KX.509 方案。在此基礎(chǔ)上，借鑒KX.509 的代理思想，在Globus環(huán)境下提出了一種采用web 登陸模塊構(gòu)建的網(wǎng)格身份認(rèn)證模型，為校園網(wǎng)格用戶提供透明的證書生成、使用和管理。在用戶注冊(cè)和認(rèn)證過程中，web 登陸模塊自動(dòng)為用戶產(chǎn)生數(shù)字代理證書，使用戶不需擁有自己的數(shù)字證書。
關(guān)鍵詞：網(wǎng)格安全；認(rèn)證；Kerberos ；KX.509
Abstract. Integrating the needs of grid development, analyzed current broadly adopted
Kerberos authentication mechanism, and researched GSI and KX.509 in different grid
environment. On these basis, drawing the proxy idea of KX.509, give a grid authentication model which adopt weblogin module in the Globus environment. For the campus grid user provides the transparent certificate creation, employment and management. In the process of registration and authentication, weblogin automatically create digital proxy certificate for users, and users needn’t have their own digital certificate.
Key words: grid security; authentication; Kerberos; KX.509