結合網格發展的需要，分析了當前廣泛采用的Kerberos 身份認證機制，研究了
不同網格環境下GSI 方案和KX.509 方案。在此基礎上，借鑒KX.509 的代理思想，在Globus環境下提出了一種采用web 登陸模塊構建的網格身份認證模型，為校園網格用戶提供透明的證書生成、使用和管理。在用戶注冊和認證過程中，web 登陸模塊自動為用戶產生數字代理證書，使用戶不需擁有自己的數字證書。
關鍵詞：網格安全；認證；Kerberos ；KX.509
Abstract. Integrating the needs of grid development, analyzed current broadly adopted
Kerberos authentication mechanism, and researched GSI and KX.509 in different grid
environment. On these basis, drawing the proxy idea of KX.509, give a grid authentication model which adopt weblogin module in the Globus environment. For the campus grid user provides the transparent certificate creation, employment and management. In the process of registration and authentication, weblogin automatically create digital proxy certificate for users, and users needn’t have their own digital certificate.
Key words: grid security; authentication; Kerberos; KX.509