基于J2EE的安全中间件的研究与实现  

Research and implement of security middleware based on J2EE

作　　者：李婉婷[1] 

机构地区：[1]解放军信息工程大学,河南郑州450002

出　　处：《计算机工程与设计》2005年第6期1548-1550,共3页Computer Engineering and Design

摘　　要：针对J2EE架构下数据交换系统的安全性和可移植性要求,在J2EE体系结构和EJB组件规范的基础上提出了一种新的、跨平台、跨系统的安全中间件的设计方案,并对其做了详细的安全性分析。该方案基于公钥证书和混合密码体制,实现对数据交换双方双向身份认证、会话密钥安全协商和交换数据加解密的多项功能,从而确保了数据的完整性、机密性和可用性。For security and transplantation ofthe data interchange system in J2EE, a new scheme ofsecurity middlewarewas put forward based on J2EE system frame and EJB component protocol, which could cross different operate systems and platforms. The security of the scheme was also analyzed in detail. In the scheme, the identity of users to interchange data were verified by each other. The session key was agreed in security and data was encrypted to interchange. Through the certification and the hybrid cryptosystem, the data integrity, confidentiality and authentication were realized.

关 键 词：公开密钥基础设施 EJB/J2EE 中间件 身份认证 数据加密标准 RSA算法 数字签名 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]