通用CORBA安全服务的研究与实现

Implementation of General CORBA Security Service

基于CORBA平台的各种分布应用(尤其是企业商务应用,政府网上办公系统,电子金融等)对CORBA环境的安全性提出了新的挑战。这些应用不仅要求CORBA环境提供高强度的安全功能,而且要求CORBA环境的安全服务具有通用性和灵活性,能够满足多领域的、多变的、复杂的安全需求。已有的大多数CORBA安全服务虽能够提供高强度的安全功能,但是却不能满足通用性和灵活性方面的各种要求,因而它们难以应用于大规模多领域分布应用环境。该文参照主流分布平台的安全模型以及相关的各种安全标准,实现了通用的CORBA安全服务─DOCE安全服务。该安全服务已在测控信息管理信息系统中获得成功应用。将安全服务真正安全地和透明地挂接在各种CORBA产品上要面临许多问题,该文对此作了深入的探讨。

Distributed applications have proposed serious requirement to the security of CORBA platform,thus imple-mentation of CORBA security service is very important.These applications not only require CORBA environment to pro-vide strong security functions,but also require the security service provided be general and flexable,so that the complex and variable requirements of applications can be meeted.Existing security services provide strong security functions,however,most of them can not wholly satisfy the properties of generality and flexability,such as application portability,security function1replacability,and security mechanism independentability,thus they can hardly apply to the large scale distributed application system.According to the relative distributed platform security models and security standards,the writers implement a general security service-DOCE security service,which has be successfully applied to the satellite measure and control information management system.