| Instance-oriented delegation： A solution for providing security to Grid-based mobile agent middleware |
| |
| 引用本文： | 马天驰,李善平.Instance-oriented delegation： A solution for providing security to Grid-based mobile agent middleware[J].浙江大学学报(A卷英文版),2005,6(5):405-413. |
| |
| 作者姓名： | 马天驰 李善平 |
| |
| 作者单位： | School of Computer Science and Technology，Zhejiang University，Hangzhou 310027，China，School of Computer Science and Technology，Zhejiang University，Hangzhou 310027，China |
| |
| 摘 要： | INTRODUCTION Grid computing, since its emergence, has beenwidely regarded as a new revolution of informationtechnologies (Foster et al., 2001). Due to the highheterogeneity and complexity in Grid environments,mobile agent (MA) has been considered as one of thepromising solutions for realizing flexible and scalableGrid Computing. With the MA support, one canexecute parts of its program on any networked hostsoffering needed services. In the Grid world, applications usually need toget se…
|
| 关 键 词： | 运动物体 网格 信任系统 中间件 计算机技术 |
| 收稿时间： | 8 February 2002 |
Instance-oriented delegation: A solution for providing security to Grid-based mobile agent middleware |
| |
| Ma Tian-chi,Li Shan-ping.Instance-oriented delegation: A solution for providing security to Grid-based mobile agent middleware[J].Journal of Zhejiang University Science,2005,6(5):405-413. |
| |
| Authors: | Ma Tian-chi Li Shan-ping |
| |
| Institution: | (1) School of Computer Science and Technology, Zhejiang University, 310027 Hangzhou, China |
| |
| Abstract: | New challenges are introduced when people try to build a general-purpose mobile agent middleware in Grid environment. In this paper, an instance-oriented security mechanism is proposed to deal with possible security threats in such mobile agent systems. The current security support in Grid Security Infrastructure (GSI) requires the users to delegate their privileges to certain hosts. This host-oriented solution is insecure and inflexible towards mobile agent applications because it cannot prevent delegation abuse and control well the diffusion of damage. Our proposed solution introduces security instance, which is an encapsulation of one set of authorizations and their validity specifications with respect to the agent's specific code segments, or even the states and requests. Applications can establish and configure their security framework flexibly on the same platform, through defining instances and operations according to their own logic. Mechanisms are provided to allow users delegating their identity to these instances instead of certain hosts. By adopting this instance-oriented security mechanism, a Grid-based general-purpose MA middleware, Everest, is developed to enhance Globus Toolkit's security support for mobile agent applications. |
| |
| Keywords: | Mobile agent Grid Trust model Delegation |
| 本文献已被 CNKI 万方数据 SpringerLink 等数据库收录！ |
