CORBA中的安全机制及实现

对象请求代理（ＯＲＢ）安全服务的核心是身份验证、安全调用与访问控制。介绍了基于Ｘ．５０９身份认证框架的实现技术；身份验证实现对客户宣称的身份真实性认证，而安全调用在消息级对数据库接进行数据流加密从而保证在网络中传递请求与响应的安全性，介绍了安全调用拦截器的结构及功能；访问控制实现了对对象的调用进行权限约束。描述了访问允许判定过程。

Security Mechanism in Common Object Request Broker Architecture (CORBA) and Its Implementation

This paper covered basic mechanism and implementation technology of Object Request Broker(ORB) security service in CORBA system, of which the key components are authentication, secure invocation and access control. The authentication validates the client's asserted identity, in this respect, the implementation technology based on X.509 authentication framework was introduced. By encrypting bytes stream in message level, the secured invocation ensures that the requests and replies in transit are secure, in this respect, the structure and function of secure invocation interceptor were presented in detail. The access control controls callings on objects, in this respect, access decision method was described.