基于corba的改良访问控制模型研究-计算机应用技术专业论文.docxVIP

ABSTRACTDistributed ABSTRACT Distributed applications are playing arl increasingly important role motivated by the need of scalable and open environments that support cIistributcd computing．As applications move from corporate environments to the Interact，the lack of security and trustworthy mechanisms becomes evident．Security is a critical requirement in scenarios such as electronic conlmerce and collaborative work，especially if distributed object technology is used aS a backbone． CORBA is an architectural specification for Object-Oriented application based on distributed computing provided by OMG which also facing security and revise for its security service．Access controls are，probably，the most important ones． Application-level access control is an important requirement in many distributed environments．But CORBA Security Services Specification is not supported．and a Resource Access Decision facility comes into being．Although PAD facility provide a method for fine-grained application-level access control，but there have a limitation in police management．In addition，considering application domain·specific factors， authorization logic should be separated from application logic．It needs authorization service as all external component to be integrated into applicafions． This paper analyses the limitation of existing CORBASec and RAD，Introduces the basic idea to integrate the services of an external PMI into CORBA applications using the improved RAD facility，and presents a new access control model based on CORBA． This model has three modules as PMI authorization service；policy management tools and PMI．RAD．PMI authorization service module separate the certification of attributes from access control functionalities and manage the authorization for resources by issuing attribute certificates．Policy management tools module not only describe the restrictions in such as document structures．attributes and data type sufficiently but also harmonize each procedure via transferring