面向移动终端的安全中间件系统设计与实现

Design and implement of security middleware system based on mobile terminal

针对传统安全中间件系统应用于资源受限的移动终端时存在紧耦合性以及可定制性、可扩展性支持不够等问题,提出一种基于元数据驱动的移动终端安全中间件系统。该系统通过提取软件开发过程的共同安全服务需求,进一步采用跨平台的Web服务形式发布以构成系统基础能力,同时将资源消耗大的安全服务部署到系统基础资源层上并采取元数据驱动形式进行管理。实验表明,基于该系统的终端安全服务开发过程具有良好的扩展性、高效性和共享性。

There are some issues such as high coupling and lacking of support for customization in the application of traditional security middleware in mobile devices with limited resources.To solve this problem,our paper proposes a metadata-driven security middleware for mobile terminal.Our system extracted the common security service needs in the software development process and employed a metadata-driven management form while large security services with too much resource consumption are transferred to the system basic resources layer.The experiment results showed that the development process of terminal security service based on SMSMT will become scalable,efficient and sharable.