一种应用安全中间件设计实例

Architecture and Design Practice of A Security Middleware

应用安全中间件既是“邮政综合计算机网络安全保密系统”的组成部分,也可以独立出来使用,它与底层密码硬件设备相结合,通过一组应用编程接口(API)系统软件套件为基于不同平台的各类应用系统在应用层、网络协议传输层和网络协议IP层提供统一、标准的安全服务,包括数据机密性、完整性、不可抵赖性以及身份认证服务等。该文主要描述该应用安全中间件的体系结构和各个组件的具体设计。

The security middleware is part of 'the integrated postal intranets secure system', but it is also useful without the other part of the secure system. By a set of API, the security middleware can provide most secure services uniformly to multi-applications based on windows platform or Unix platform, such as data confidentiality, data integrity, non-repudiation and authentication. The paper describes the architecture and concerned design of the security middleware.