User-Friendly Authentication and Authorisation for Grid Environments

该项目的目的是为RealityGrid项目所使用的网格中间件和网格环境开发一个可用的、轻量级的身份验证和授权框架。这个安全框架将被集成到正在为RealityGrid项目开发的轻量级中间件中。为确保架构确实符合有关的保安要求，我们首先会采用以用户为中心的设计和保安方法，以确定这些要求的性质。然后将使用正式的方法来细化、分析和建模这些需求，最终为框架开发一个安全模型。然后将对该安全模型进行正式分析和验证，最后对实现的安全框架进行正式分析和验证。为确保架构可用及符合用户需求，我们采用以用户为中心的设计方法，先找出用户需求，然后设计及发展架构。在整个软件开发周期中，对软件原型和已开发的软件进行持续的用户试验是补充。这些试验的结果被输入到用于开发安全框架的迭代开发周期中。

The aim of this project is to develop a usable, lightweight authentication and authorisation framework for the grid middleware and grid environments used by the RealityGrid Project. This security framework will be integrated into the lightweight middleware being developed for the RealityGrid Project.To ensure that the framework actually meets the relevant security requirements, first user-centred design and security methodologies will be used to determine the nature of these requirements. Formal methods will then be used to refine, analyse and model these requirements, culminating in the development of a security model for the framework. Formal analysis and verification of this security model and, finally, of the implemented security framework will then be undertaken.To ensure that the framework is usable and meets the user requirements, a user-centred design methodology is used to elicit the user requirements and then design and develop the framework. This is complemented by ongoing user trials of both software prototypes and the developed software throughout the software development cycle. The results of these trials are fed into the iterative development cycle used to develop the security framework.