Teburin Abubuwan Ciki
3+
Gwaje-gwaje Masu Goyon Baya
2-7
Kwanakin Ingantaccen Token
4
Abubuwan Ginshiƙai na Asali
1. Gabatarwa
Hanyoyin tabbacin asali na tushen token suna yaɗuwa a cikin tsarin kwamfuta rarraba don binciken ƙarfin lantarki mai girma. Dandalin Lissafi na Duniya na LHC (WLCG) ya haɓaka duk ayyuka don tallafawa token na WLCG, yana nuna wannan yanayin masana'antu. A Cibiyar Nazarin Ƙarfin Lantarki Mai Girma (IHEP) a China, an kafa token Kerberos a matsayin babbar hanyar tabbacin asali a cikin gungu na lissafi na gida kuma yanzu ana faɗaɗa su zuwa yanayin lissafi rarraba.
2. Bayanan Baya da Dalili
IHEP tana haɓaka dandalin lissafi rarraba don haɗa wurare da yawa na bincike na China. Duk da haka, gwaje-gwaje da yawa da suka daɗe a IHEP, musamman gwajin BES, suna da alaƙa sosai da yanayin gungu na gida gami da tsarin bayanai, ayyukan ajiya, da albarkatun lissafi. Don magance wannan ƙalubalen, IHEP ta aiwatar da hanyar "Faɗaɗa Gungu" wanda ke faɗaɗa iyawar gungu na gida zuwa yanayin lissafi rarraba, yana ba da damar ayyukan BES su ƙaura zuwa wurare masu nisa tare da ƙaramin rushewa.
3. Kalubalen Fasaha
Babban ƙalubalen a cikin aiwatar da token Kerberos shine sarrafa rayuwar token a cikin yanayin rarraba. Token Kerberos a IHEP yawanci suna da lokacin inganci na kwanaki 2 tare da iyakar sabuntawa na kwanaki 7. Dole ne a tabbatar da sabunta token a mahimman wurare uku:
- Lokacin gabatarwar aiki
- Lokacin jeren aiki
- Lokacin aiwatar da aiki
4. Tsarin Tsarin
Yanayin token Kerberos a IHEP ya ƙunshi abubuwa huɗu masu haɗin kai waɗanda ke aiki tare don samar da cikakkiyar tabbacin asali a duk albarkatun lissafi rarraba.
4.1 Mai Samar da Token
Mai samar da token yana samar da token Kerberos lokacin da masu amfani suka shiga cikin nodes masu gabatarwa kuma ya buga waɗannan token zuwa ma'ajiyar token. Wannan ɓangaren yana kula da ƙirƙirar token na farko tare da ingantaccen inganci da sigogin sabuntawa.
4.2 Ma'ajiyar Token
Wannan tsarin ajiya na tsakiya yana kula da duk fayilolin token na yanzu kuma ya haɗa da sabis na sabuntawa wanda ke sabunta rayuwar token lokaci-lokaci don hana ƙarewa yayin ayyukan lissafi masu tsayi.
4.3 Canja Token
Hanyar canja wuri tana motsa fayilolin token cikin aminci daga ma'ajiyar zuwa nodes ma'aikata a cikin wurare rarraba, yana tabbatar da cewa token suna samuwa inda ake buƙata don aiwatar da aikin.
4.4 Injin Abokin Ciniki na Token
Wannan ɓangaren yana fara yanayin token akan nodes ma'aikata kuma yana sarrafa sabuntawar rayuwar token yayin aiwatar da aikin, yana ba da damar tabbacin asali ci gaba.
5. Cikakkun Bayanai na Aiwatarwa
5.1 Tushen Lissafi
Tabbacin asali na Kerberos ya dogara ne akan maɓalli mai ma'ana da inganci na tushen lokaci. Ingantaccen token na iya wakilta kamar haka:
$V(t) = \begin{cases} 1 & \text{idan } t_{current} \leq t_{creation} + t_{valid} \\ 0 & \text{in ba haka ba} \end{cases}$
Inda $t_{valid}$ yake wakiltar lokacin inganci (yawanci kwanaki 2 a IHEP) kuma ana ba da izinin sabuntawa har zuwa $t_{creation} + t_{renew}$ (yawanci kwanaki 7).
5.2 Aiwatar da Lambar
Sabis na sabuntawa token yana aiwatar da ma'anar mai zuwa:
class TokenRenewalService:
def renew_token_if_needed(self, token, current_time):
"""Sabunta token idan yana gabatowa ƙarewa"""
if token.is_expiring_within(threshold=3600): # 1 hour threshold
if current_time <= token.created_time + token.renewal_period:
new_token = self.kinit_renew(token.principal)
self.repository.update(token.principal, new_token)
return new_token
return token
def kinit_renew(self, principal):
"""Ai wata umarnin sabuntawa Kerberos"""
import subprocess
result = subprocess.run(['kinit', '-R', principal],
capture_output=True, text=True)
if result.returncode == 0:
return self.extract_current_token(principal)
else:
raise TokenRenewalError(f"Gaza sabunta token: {result.stderr}")6. Sakamakon Gwaji
An yi nasarar tura tsarin token Kerberos a duk faɗin kayayyakin lissafi rarraba na IHEP. Manyan gwaje-gwaje uku a halin yanzu suna amfani da wannan tsarin tabbacin asali:
- LHAASO (Babban Dandalin Kallon Ruwan Sama mai Girma)
- BES (Gwajin Beijing Spectrometer)
- HERD (Gano Radiation Cosmic Mai Ƙarfi)
Waɗannan gwaje-gwaje suna amfani da token Kerberos don samun damar bayanai da ke cikin tsarin fayil na EOS da Lustre a cikin wurare rarraba. Aiwatarwar ta nuna ingantaccen tabbacin asali tare da ƙarancin gazawar aiki saboda ƙarewar token.
7. Bincike da Tattaunawa
Aiwatar da token Kerberos a cikin yanayin lissafi rarraba na IHEP tana wakiltar babban ci gaba a hanyoyin tabbacin asali don binciken ƙarfin lantarki mai girma. Wannan hanyar tana magance muhimman ƙalubale a cikin tsaro na tsakanin rukunoni yayin kiyaye daidaitawa da abubuwan more rayuwa na yanzu. Idan aka kwatanta da ingantaccen tabbacin asali na tushen takaddun shaida da ake amfani da su a yawancin yanayin lissafi na grid (kamar yadda aka rubuta a cikin rahotannin fasaha na WLCG), hanyoyin tushen token suna ba da ingantaccen amfani da rage yawan sarrafawa.
Gudunmawar fasaha ta aikin IHEP tana cikin cikakkiyar kayan aiki wanda ke sarrafa duk rayuwar token a cikin yanayin rarraba. Wannan tsarin yana da kamanceceniya da sarrafa token OAuth 2.0 a cikin ayyukan yanar gizo amma an inganta shi musamman don ayyukan lissafi na kimiyya. Ikonsa na sabunta token ta atomatik yana magance iyakataccen iyaka a cikin Kerberos—dogaronsa ga ci gaba da haɗin intanet zuwa Cibiyoyin Rarraba Maɓalli (KDCs).
Bisa ga ainihin takardar CycleGAN na Zhu et al. (2017), nasarar daidaita yanki yana buƙatar ingantaccen wakilcin siffa a cikin muhalli. Hakazalika, tsarin token na IHEP yana ba da damar wakilcin asali mai aminci a cikin wuraren lissafi iri-iri. Tushen lissafi na Kerberos, dangane da bambance-bambancen yarjejeniyar Needham-Schroeder, yana ba da ingantaccen tsaro na sirri yayin da aiwatarwa ke ƙara aikin injiniyan tsarin rarraba.
Tura a cikin manyan gwaje-gwaje uku yana nuna girman tsarin da amincinsa. Wannan nasara ta yi fice musamman idan aka yi la'akari da ƙarfin aikin lissafi na ƙarfin lantarki mai girma, wanda sau da yawa ya haɗa da sarrafa bayanai na petabytes a cikin dubunnan nodes na lissafi. Nasarar da aka samu a IHEP tana nuna cewa irin wannan hanyoyin tushen token na iya amfanar sauran al'ummomin kimiyyar lissafi waɗanda ke fuskantar ƙalubalen tabbacin asali rarraba.
8. Aikace-aikacen Gaba
Tsarin token Kerberos a IHEP yana da jagorori masu ban sha'awa da yawa don ci gaba gaba:
- Haɗin gwiwa tare da Grids na Duniya: Tsawaita haɗin kai na token tare da WLCG da sauran grid ɗin bincike na duniya
- Haɗin Girgije: Daidaita tsarin token don yanayin girgije gauraye da masu samar da girgije na kasuwanci
- Haɓaka Blockchain: Bincika sarrafa token na tushen blockchain don ingantaccen bincike da rarrabawa
- Ayyukan Koyon Injin: Tsawaita tallafi don tsarin koyon lissafi rarraba waɗanda ke buƙatar ingantaccen tabbacin asali
- Sirrin Sirri mai Jurewa Quantum: Shirye-shiryen algorithms ɗin sirri na bayan-quantum a cikin tsaron token
9. Nassoshi
- Rahoton Ƙirar Fasaha na WLCG, Dandalin Lissafi na Duniya na LHC, 2021
- Neuman, B. C., & Ts'o, T. (1994). Kerberos: Sabis na Tabbacin Asali don Cibiyoyin Sadarwa na Kwamfuta. IEEE Communications
- Takaddun Tsarin Ajiya na EOS, CERN, 2022
- Takaddun XRootD, 2023
- Haɗin gwiwar LHAASO. (2020). Babban Dandalin Kallon Ruwan Sama mai Girma
- Haɗin gwiwar BES III. (2022). Rahoton Fasaha na Gwajin Beijing Spectrometer
- Haɗin gwiwar HERD. (2021). Bayanin Manufar Gano Radiation Cosmic Mai Ƙarfi
- Takaddun Tsarin Fayil na Lustre, 2023
- Takaddun AFS, IBM, 2022
- Takaddun XCache, 2023
- Zhu, J. Y., Park, T., Isola, P., & Efros, A. A. (2017). Fassarar Hotuna-zuwa-Hoto mara Haɗe ta amfani da Cibiyoyin Adawa masu Daidaitaccen Zagaye. IEEE ICCV