基于JAAS安全机制的J2EE Web系统用户身份认证设计  

DESIGN OF USER IDENTITY AUTHENTICATION IN J2EE WEB SYSTEM BASED ON JAAS SECURITY MECHANISM

作　　者：刘景林[1] 

机构地区：[1]泉州经贸职业技术学院信息技术系,福建泉州362000

出　　处：《陕西科技大学学报（自然科学版）》2011年第3期99-104,112,共7页Journal of Shaanxi University of Science & Technology

摘　　要：通过深入研究JAAS安全认证机制,在J2EE Web系统中应用JAAS技术提供的动态、可插拔认证模型实现了用户身份的安全认证,即通过X.509数字证书和用户口令进行双重堆叠认证.在Tomcat服务器上配置实现了服务器与客户端之间的SSL双向认证,并通过建立HTTPS连接,以保护数据的安全传输,进一步提高了系统用户认证的安全性.The paper studied the JAAS security authentication machanise intensively, found the dynamic and pluggable authentication module provided by JAAS technology could realize the user identity authentication security in the J2EE Web system, that is dual-stack authentication based on X. 509 digital certificate and password. By configuring the Tomcat server to achieve SSL bidirectional authentication between server and client and establishing the HTTPS connection to insure the security transmission of data, moreover which improve the user authentication security furtherly.

关 键 词：JAAS安全机制 J2EE应用系统 身份认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]