组合公钥密码的网格身份认证机制

针对目前以PKI技术为基础的网格安全基础设施认证机制存在的用户规模小、效率低、依赖第三方机构在线运行等问题,提出了基于组合公钥密码的网格身份认证机制.该机制根据离散对数难题的数学原理构建公开密钥与私有密钥矩阵,生成数量庞大的由公开密钥与私有密钥组成的公私钥对,从而实现基于标识的超大规模的密钥生产与分发.通过在网格应用中实现该机制,和网格安全基础设施的认证效率进行了比较,验证了基于组合公钥密码的网格身份认证机制的可行性和高效性.

Combined public key based certification mechanisms of grid

Grid security is complicated on account of pervasive resource sharing and dynamic,heterogeneous,multi-domains computing environment.Since the public key infrastructure(PKI)-based grid security infrastructure (GSI) is figured to be not efficient enough for large scaled grid applications,and need third-party authorities keeping online,a combined public key(CPK) based certification mechanism of grid is proposed.Basing on the mathematics principle of discrete log problem,huge quantities of key pairs can be produced by a public and private key matrix,and producing and distributing of huge amount of keys can be realized.Implementing in grid applications,the efficiency of CPK is compared with that of GSI,and the CPK based certification mechanism of grid is proved to be feasible and efficient.