Research Of Grid Security Infrastructure In G/S Mode

With the continuous growth of the spatial information application requirement, the observation data of the earth requires faster speed to be obtained, higher resolution and greater amount of information, which puts forward higher requirement of spatial information sharing and services. The Web access architecture of spatial information named G/S mode which is based on Extensible Markup Language emerges as the times require,using Web information access architecture C/S mode and B/S mode for reference. Although the G/S mode has a certain basis for study, but there are a lot of work to do. The paper will discuss the network security issues of server cluster and distributed data processing of G/S.The G/S mode is mainly used in Digital Tourism System and E-Government system currently. Whether the spatial data of Digital Tourism or the spatial date of E-Government are need security access control. Although the mainstream open source grid development project of Globus Toolkit could provide a completely grid system security mechanisms, and the security certification infrastructure of Globus Toolkit could meet the needs of user authentication in general system, but the authorization infrastructue of Globus Toolkit only supports Grid FTP and can not meet the needs of Digital Tourism and E-Government have a large amount of users, wide classes and more resource informations characteristics'requirements. So that, it is necessary to develop a series services of security authorization for G/S mode application systems.The paper main studies the open source grid development project of Globus Toolkit, combined with the current mainstream grid security framework, deeply analysis the security issues of user authentication and authorization in grid. And on this basis, after full study the security requirements of the Digital Tourism System and E-Government in G/S mode, combined the principle of Globus security Infrastructure, designs a G/S mode grid security authorization plan and implements a basic mode of authorization plan.The main study are as follows: Describes the concept of digital earth platform and G / S mode, as well as the relationship between each other, in order to understand the need of G/S mode application systems. Survey the basic function modules of Grid Architecture and currently the mainstream grid architecture, as well as the GSI of Globus Toolkit. In accordance with the basic security policies of Grid security, and specific description, provide analysis for these polices, and how these policies are used in the Globus Toolkit.The main research results are as follows: Analysis the characteristics of user and Geo spatial Data of Digital Tourism System and E-Government in G/S mode, establish with the security policies of G/S server cluster structure in grid environment. According to the characteristics of application systems in G/S mode, design a grid authorization framework for G/S mode and implements the model system of authorization framework.