Innovations for Grid Security from Trusted Computing Protocol Solutions to Sharing of Security Resource

摘要

A central problem for Grid (or web) services is how to gain confidence that a remote principal (user or system) will behave as expected. In Grid security practice at present, issues of confidentiality and data integrity rely on weak social trust mechanisms of "reputation maintenance": a principal who is introduced by a reputable party should hopefully behave in "best effort" to maintain the reputation of the introducer. As will be discussed in this paper, this gentleman's notion of trust is insufficient for a large class of problems in Grid services. The emerging Trusted Computing (TC) technologies offer great potential to improve this situation. The TC initiative developed by the Trusted Computing Group (TCG) takes a distributed-system-wide approach to the provisions of integrity protection for systems, resources and services. Trust established from TC is much stronger than that described above: it is about conformed behaviors of a principal such that the principal is prohibited from acting against the granted interests of other principals it serves. We consider that this stronger notion of trust from TC naturally suits the security requirements for Grid services or science collaborations. We identify and discuss in this paper a number of innovations that the TC technologies could offer for improving Grid security.