CORBA中的安全机制及实现  

Security Mechanism in Common Object Request Broker Architecture (CORBA) and Its Implementation

作　　者：王怀伯[1] 李林[1] 张申生[1] 

机构地区：[1]上海交通大学计算机科学与工程系,上海200030

出　　处：《上海交通大学学报》2000年第7期983-986,共4页Journal of Shanghai Jiaotong University

基　　金：国家"8 6 3"高技术项目 !( 86 3- 511- 0 30 - 0 0 6 ;86 3- 511-84 2 - 0 12 )

摘　　要：对象请求代理 ( ORB)安全服务的核心是身份验证、安全调用与访问控制 .介绍了基于 X.50 9身份认证框架的实现技术 ;身份验证实现对客户宣称的身份真实性认证 ,而安全调用在消息级对数据连接进行数据流加密从而保证在网络中传递请求与响应的安全性 ,介绍了安全调用拦截器的结构及功能 ;访问控制实现了对对象的调用进行权限约束 .This paper covered basic mechanism and implementation technology of Object Request Broker(ORB) security service in CORBA system, of which the key components are authentication, secure invocation and access control. The authentication validates the client's asserted identity, in this respect, the implementation technology based on X.509 authentication framework was introduced. By encrypting bytes stream in message level, the secured invocation ensures that the requests and replies in transit are secure, in this respect, the structure and function of secure invocation interceptor were presented in detail. The access control controls callings on objects, in this respect, access decision method was described.

关 键 词：对象请求代理 安全服务 身份验证 安全机制 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]