Java鉴别和许可服务机制的研究

The Research of the Mechanism of Java Authentication and Authorization Service

1.引言JDKl.2运用安全策略来决定对运行代码赋予访问许可权,而且这种决定依赖于代码的特性,例如代码从何而来,是否被数字签署以及被谁签署.这样一种代码中心型的访问控制并不常见.

Java is a Net-Oriented computing technology. When it is applied to a distributed system, we must think over the security of the distributed system. If the system contains some parts that are potentially hostile to each other , the service login and location must be managed reliably. Java Authentication and Authorization Service is a standard API designed for authenticating user and allocating authority. By JAAS and JDK1. 2, an application can provide codesource-based, user-based access controls or the combination of the two. This paper expatiates the mechanism of JAAS based on the Kerberos protocol.