面向JMS消息中间件的安全协议MSTP

Security Protocol of JMS-Based Message-Oriented Middleware

针对JMS规范和消息中间件的特点,提出面向JMS消息中间件的安全协议MSTP(包括消息传输协议、认证协议、审计协议、分布式信任协议),为解决消息中间件的安全问题提供了一个可选的方案.在具有自主知识产权的JTang应用服务器上的实验表明,MSTP有效地保障了消息传输和存储的安全,并达到较小的时间开销与可接受的性能.

The paper firstly addresses the existing security problems in current JMS-based message -oriented middleware. Then, paper introduces JMS specification and the framework of the MSTP （Message Security Transport Protocol） which can solve those＂ security problems. Finally, paper shows a application instance JTangMQ based on MSTP which can protect message from unauthorized access in any distributed environment with little penalty of efficiency reduced and acceptable performance.