企业应用中的访问控制服务

Access Control Service for Enterprise Applications

现代企业中存在着大量的管理信息系统,这些系统多具有独立的访问控制模块。在这种情况下,企业的安全管理员很容易因为管理系统的多样性和分布性而导致工作出错。论文介绍了一种面向企业中多个应用的基于J2EE的访问控制服务,并讨论了调用该服务的三种方法:内嵌式调用,使用JMS的内嵌式异步调用,使用JMS的分布式异步调用。论文提供的方法可以满足企业应用的不同需要。此外,还讨论了对引用监视器效率进行优化的一些方法。

Usually there are many application systems in an enterprise.These applications mostly need an access control module to control access to sensitive information in the enterprise.But it is complicated and fallible for the security administrator（or system security officer） to manage all security policies in different applications.This paper introduces an access control service for multi enterprise applications which is based on J2EE（Java 2 platform,Enterprise Edition ）.The paper discusses three methods to invoke reference monitor of the access control service,embedded invoking, asynchronized embedded invoking using JMS and asynchronized distributed invoking using JMS.These methods can meet the different requirements of enterprise appllcations.finally,the paper discusses some guidelines and technologies which optimize the efficiency of reference monitor.