Development Of Security Grid Portal Based On PKI&RBAC

Grid not only can provide high-quality services, but also can eliminate Resource Island through the integration and coordination of the resources. The optimized resources will greatly reduce the cost that we have to pay to use the resources. Grid portal masks the construction of the complex Grid, provides the users a transparent interface to use it and helps us manipulating grid resources.However, Grid portal confronts many kinds of security threats such as informati_ on interception, modification and unauthorized entities. There are many technical solutions to the security problems such as firewalls, intrusion detection systems etc. These programmes ensure the system security, but it is very complicated to pass the Globus system authentication and submit tasks.In this paper, we combine the public key infrastructure (PKI) security with role-based access control (RBAC) integration, and propose a PKI RBAC Grid Port(PRGP) to Grid portal system threats. PRGP constructs a Certification Center (CA) to issue and revoke user digital certificates, ensures data layer security through Secure Sockets Layer (SSL), enhances message layer security through Ws-Security, optimizes single-point landing through CAS (Center Authority Server), provides RBAC access control through Lagrange polynomial and facilitates the setting of agent role through add agent coding.Finally, this article combines the PRGP with distributed e-commerce, effectively integrates the resources under distributed heterogeneous systems and implements the prototype system. This system resolves data transmission security, data integrity, authentication, non-recognition of transactions, resources access, service deployment and information search and constructs an integrated, open, independent grid e-commerce application platform. It should be noted that we don't construct grid, but ensure how the applications can run in the grid safely and easily.