Authorization within grid-computing using certificateless identity-based proxy signature
Authorization within grid-computing using certificateless identity-based proxy signature
复制标题
使用无证书的基于身份的代理签名在网格计算内进行授权
DOI：
10.1145/1851476.1851513
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
S. Matsuoka
中科院分区：
文献类型：
--
作者：
Mohamed Amin Jabri;S. Matsuoka
确保网格计算环境中的安全性和隐私性是用户采用和使用安全且可信的网格的基本和关键要求。鉴于这一事实，如今大多数网格都依靠事实上的标准 GSI 框架来提供安全服务，该框架以公钥终端实体证书 (EEC) 和代理证书为基础。但是，由于管理、分发和撤销受损 EEC 的巨大负担，公钥证书正在成为大规模广泛采用和使用网格的障碍。因此，许多研究工作都强调在网格计算环境中采用基于身份的密码学和无证书公钥密码学是多么引人注目，这可以减轻使用 PKI 证书的负担，同时仍然为非专家用户和网格管理员提供预期的安全、灵活和易于使用的网格。
在本文中，我们为网格环境提出了一种新的基于无证书身份的代理签名方案，以实现基于属性的授权、细粒度委派以及增强的委派链建立和验证，所有这些都无需依赖任何类型的 PKI 证书或代理证书。
Ensuring security and privacy within the Grid computing environment is a fundamental and key requirement for users in order to adopt and use secure and trusted Grids. In light of this fact, the majority of grids, nowadays, provide security services by relying on the de facto standard GSI framework which makes use of Public key End Entity Certificates (EEC) and Proxy Certificates as its foundation. But, due to the huge burden in managing, distributing and revoking compromised EEC, Public Key Certificates are becoming an impediment to the wide adoption and use of Grids at scale. Thus, many research efforts stressed how compelling is the adoption of Identity-Based cryptography and Certificateless Public Key Cryptography within the Grid-Computing environment, which could alleviate the burden of using PKI certificates while, still, providing the intended secure, flexible and easy use of the Grid to both non expert users and Grid's administrators.
In this paper, we propose a new Certificateless Identity-Based Proxy Signature scheme, for the grid environment, in order to enable attribute-based authorization, fine-grained delegation and enhanced delegation chain establishment and validation, all without relying on any kind of PKI Certificates or proxy certificates.