基于JAAS的安全认证授权方案的实现  

Implementation of JAAS-based security authentication and authorization plan

作　　者：周怀芬[1] 曹作良[1] 袁萎[1] 陈涛[1] 朱辉[1] 

机构地区：[1]天津理工大学机械工程学院,天津300191

出　　处：《天津理工大学学报》2006年第4期27-29,共3页Journal of Tianjin University of Technology

基　　金：天津市科技攻关资助项目(0431079R)

摘　　要：本文分析现有认证授权所存在的问题,及JAAS的优点,提出了基于JAAS的认证授权的实现方案,说明基于JAAS的认证授权的基本原理.经过测试和研究,该方法能够有效的改善现有的认证授权所存在的问题(如越权访问等).This study analyzes the current authentication and authorization security questions, the advantages of JAAS, and proposes a JAAS-baesd implementation of authentication and authorization, The implementation depicts the basic principal of JAAS-based authentication and authorization. Through testing and research, it is demonstrated that this methodology is effective to current problems（ such as nonprivileged-access）of authentication and authorization.

关 键 词：认证 授权 JAAS 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]