【作者】 阚博文； 石京燕；

【Author】 Bowen Kan;Jingyan Shi;Computing Center, Institute of High Energy Physics;

【机构】 中国科学院高能物理研究所；

【摘要】 CA网格系统是保障高能物理网格应用的屏障,但是随着SHA-1算法被破解,基于SHA-1算法的CA系统面临着巨大的威胁。为了保障高能物理网格用户信息及数据安全,本文详细分析了SHA-1与SHA-2的区别和联系,设计并实现了基于SHA-2和RSA算法的CA认证系统,加强了系统的安全性。此外文章还给出了基于SHA-2的CA认证在高能物理网格工作的模型和体系结构,并讨论了目前CA系统存在的问题和将来的发展。更多还原

【Abstract】 CA grid system is the guarantee of high energy physics grid application. As SHA-1 algorithm was cracked in 2004, all of the CA system based on the SHA-1 algorithm has been facing huge threat. In order to ensure the security of high energy physics grid including the security of user information and experimental data, this paper analyzed the connection and difference between SHA-1 and SHA-2 in detail, designed and implemented the CA system based on SHA-2 and RSA algorithm. The paper strengthened the security of the system, and demonstrated model and architecture of the CA system based on SHA-2 in high energy physics grid. Besides, it discussed the current problems of CA system and its development in the future.更多还原