基于组件系统的安全机制

Security schema for component-based application

为大型组件应用提出了一种新的安全服务,使其集成该安全服务后,能保持原有组件应用的可扩展性和性能。首先分析了组件安全边界的拓扑结构与组件间的交互模式,为基于组件的系统提出了一种新的可扩展安全机制,并给出了一种组件间的双方认证协议,为其提供认证服务,最后对该认证协议进行了安全及性能分析。实验结果表明,该机制在保持原组件系统性能和可扩展性的基础上有效地提供了组件系统的安全性。

A new security mechanism for large-scale component-based applications is proposed. The novel scalable security mechanism for component-based systems utilizes the topology of the security boundaries and patterns of interactions among components. A secure component protocol is put forward that integrates our mechanism into a component infrastructure effectively. Finally, the security and performance analysis is analyzed. It＇s shown that both performance and scalability of component-based system can be kept after the security schema is introduced.