基于安全元对象的CORBA系统的访问控制机制  

Implementing Access Control for a CORBA System by Security Metaobject

作　　者：吴新勇[1] 熊光泽[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,四川成都610054

出　　处：《系统工程与电子技术》2003年第8期1032-1036,共5页Systems Engineering and Electronics

摘　　要：目前 ,使用反射机制实现非功能性机制变得越来越流行 ,出现了面向可靠性应用的各种元对象协议。针对CORBA安全服务在访问控制的细粒度实现、可定制性方面不够灵活的问题 ,提出了基于安全元对象的CORBA系统的访问控制技术。反射机制把客户对服务器对象的访问隔离开来 ,进行访问权限的检查和安全审计 ,防止应用软件的非法访问和操作来提高系统可靠性。安全元对象协议的实现采用了开放式编译器 ,使最终的访问控制系统代码量小、运行开销小 ,同时安全策略定制灵活。The use of reflection for implementation of non-functional mechanisms has become popular today, which results in various metaobject protocols. Considering that security service of CORBA lacks flexibility in access control, a security metaobject-based access control technique tor a CORBA system is presented. The reflective mechanism isolates the clients from the server object to validate the permissions and auditing, thus raising the dependability of the system. In the implementation of the metaobject protocol an open compiler is adopted, which reduces the amount of codes and overhead of the access control system, at the same time, it improves the flexibility and extensibility of security policies.

关 键 词：CORBA 访问控制 反射 安全元对象协议 

分 类 号：TP311.132.4[自动化与计算机技术—计算机软件与理论]