Dynamic accesses control method based on trust model

Abstract

A dynamic access control method based on the trust model is a security solution of the dynamic access control, which solves the problem how the users screen out the trusty node in the gridding and meets the requirement of the user massive operations by optimized distribution of the mission submitted by users according to the ability of respective resource node. The method applies the trust model and the trust evaluation control mechanism to implement the security protection to the resource provider and resource consumer in the gridding community and provide a quality guarantee to the mission submitted. The method applies the trust model into the access control mechanism and applies trust model to solves the problem how the users screen out the resource node according with the user requirement in the gridding so as to accomplish the emission submitted by users and solve the security of cooperation and resource sharing between the gridding user and gridding entity in the virtual organization and between other virtual organization entities and establish security system structure which authorizes the users in the environment for establishing the gridding computation.

Description

technical field [0001] The invention is a solution for trust evaluation of trust entities in an open grid environment, and is mainly used to solve the problem of how users screen out trustworthy nodes in the grid, and then submit tasks. The invention belongs to the technical field of distributed computing security. Background technique [0002] Grid computing has developed into an important field in the computer industry. The difference between this field and distributed computing is that grid computing is more focused on resource sharing and collaborative work as well as high-performance positioning, and is dedicated to solving the problems of multiple individuals or organizations. issues related to resource sharing. With the emergence and rise of grid computing, software systems are changing from a closed, familiar user group and relatively static form to a more open, publicly accessible and highly dynamic service model. This transformation complicates the security analy...

AI Technical Summary

Problems solved by technology

[0003] Traditional certificate systems based on public key systems, such as X.509, PGP, etc., cannot well meet the security requirements of grid computing:

[0004] (1) The certification center only guarantees the individual identification in the general sense, and does not verify the individual's ability or grant its authority, that is, it only authenticates the user's identity, but does not know whether the user has the ability or authority to operate , which also cannot guarantee the security of the system;

[0005] (2) Relying entirely on the certification center weakens the self-trust of individuals, and blindly trusting a large-scale certification center often fails to resolve the conflict of interest between individuals;

[0006] (3) It is difficult to centrally maintain the certificate revocation list, and the certificate is likely to be abused

In addition, although the public key certificate system that relies on individuals for identity authentication and recommendation has great flexibility, without a centralized trust agent, it will be difficult to apply to a large-scale user group

Images