JAAS自身的安全性分析  

SECURITY ANALYSES ON JAAS ITSELF

作　　者：王丽君[1] 任地成[1] 潘瑞[1] 

机构地区：[1]辽宁科技大学计算机科学与工程学院,辽宁鞍山114051

出　　处：《计算机应用与软件》2010年第3期279-282,共4页Computer Applications and Software

摘　　要：JAAS(Java Authentication and Authorization Service)是Java认证和授权服务的API机制,JAAS的安全性除了体现在认证和授权机制以外,还体现在对Java2平台安全体制的充分利用,分别从认证和授权两个方面对JAAS的安全性作了分析,并结合对Java2平台安全体制的分析,说明JAAS机制是如何充分利用Java语言的灵活性和安全性来保证自身安全性的。JAAS is the API mechanism of Java authentication and authorized service. In addition to the authentication and authorization mechanism, the security of JAAS is also reflected in the full usage of Java2 Platform security system. This article gives separate analyses on the JAAS security from two aspects of authentication and authorization, combining the Java2 platform security system analysis, the way the JAAS mechanism guarantees its own security has been explained by fully using the flexibility and the security of Java language.

关 键 词：JAAS 认证 授权 安全性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]