Research and implementation of identity authentication system crossing heterogeneous regions in grid environment

Researching on identity authentication crossing heterogeneous regions, designing and implementing an identity mapping and credentials converting system CredFed(credentials federation), resolving the problem about identity authentication of di-direction between the heterogeneous regions one of which employs the PKI mechanism and the other one employs the Kerberos mechanism. The CredFed is the only one in the world to resolve that problem. The CredFed is interoperable and flexible, the design of which not only can be used in grid environment but also in large scale distributed systems. This paper compares the CredFed with the related works in the world, briefly introduces the implementation of the system in CROWN project, finally gives the results of experiments testing the performance of the CredFed and evaluates this system.