分布式数据库安全代理的研究与实现

Research and implementation of distributed database security agent

针对传统的分布式数据库系统内访问控制方案存在滞后的弊端,数据传递通道存在潜在安全隐患的问题,研究并实现了分布式数据库安全代理系统。该系统分别封装了代理客户端以及代理服务端,为其他模块进行调用提供基础,通过组件技术实现代理客户端以及代理服务端的设计,给出设计模型内各模块的运行原理和功能。通过代理客户端中的组件创建同应用程序的接口以及同网络通信客户端的接口实现访问数据库的功能,向代理服务端反馈处理后的访问结果。给出网络通信平台设计过程以及代理客户端、服务端设计过程。经测试表明,分布式数据库安全代理系统可实现用户和服务器间的安全通信,可有效实现身份认证,访问性能高,可靠性高。

The access control scheme of the traditional distributed database systems has the lag characteristic, and the data transmission channel has potential security risks, therefore, a distributed database security agent system is researched and implemented. The designed security agent system is encapsulated with the proxy client and proxy server respectively, provides the basis for other modules calling. The design of the proxy client and proxy server was implemented with component technology. The operation principle and function of each module in the design model are given. The interfaces of the same application program and same network communication client are created by means of the component in the proxy client to realize the function of database access, and feed the processed access result back to the agency service. The design process of the network communication platform and design process of the proxy client and server are given. The test results show that the distributed database security agent system can realize the secure communication between user and server, identify the authentication effectively, and has high access performance and high reliability.