GOS Security: Design and Implementation

Grid technology has being widely accepted in distributed resources sharing and high performance computing cross multi administrative domains. In this paper, we analysis the security issues in grid computing environments, and propose a security framework for VegaGOS which is a service oriented architecture middleware developed for the China National Grid. We address mutual authentication using certificate with digital signature. We address authorization through combining VO level access control decision and resource level enforcement. Communication security is guaranteed by TLS/SSL at transport level and WS-security at message level. This security framework has been implemented in VegaGOS and deployed in China National Grid Environment.