1、東南大學(xué)碩士學(xué)位論文CBA中安全服務(wù)機制的研究與實現(xiàn)姓名：易建超申請學(xué)位級別：碩士專業(yè)：計算機應(yīng)用指導(dǎo)教師：顧冠群2001.3.1東南大學(xué)碩士學(xué)位論文CORBA中安全服務(wù)機制的研究與實現(xiàn)AbstractwiththedevelopmentofcomputernetworkandOb3ect—orientedtechnologyDistributedObjectcomputing(DOc)technologyemergedandhadwi

2、deapplicationItwillbethemostimportantinfrastructureofsoftwaredevelopmentofnextgenerationAtthesametime，people’sactivitiesaremoreandmoredependentoncompternetworking，thesecurityofcomputernetworkingbecomesthekerneJproblemofi

3、nformationbuildingSoitisverynecessarytoresearchthesecurityserviceframeworkindistributedprocessingenvironmentNowtherearefourmainsecurityservices，ObjectManagementGroup(OMG)’sCORBASec，OpenSoftwareFoundation’sDCE，POSIXSecuri

4、tyInterfaceandSESAME’sSecurityserviceBasedontheideaofseperationCORBAsecurityservicesabstracttheapplicat—ionlogicfromtheunderlyingtransportandsecuritymechanismsThemiddlewareabstractionlayershouldmakeitpossibletoreplacethe

5、underlyingsecuritymechanismsCORBAsecurityservicesmainlyprovidesuchsecurityfunctionalitiesasauthentication，messageprotection，authorization，auditandnonrepudiation(optional)Insteadofimplemerltatingallsecurityfunctionalityit

6、self，CORBASecusestheAPlwhichcallsunderlyingmechanismsuchastheGSS。APIbasedonthekerberosV5inthisthesisAffiliatedwiththenational863Project“KeyTechnologiesforCIMSOrientedEnterpriseIntegrationFramework”thisthesisintroducesthe

7、researchandimplementationofSecORBUSinCversionAccordingtoOMG’sCORBAsecurityservicespecification15，basedonthearchitechureanalysisofCORBAabstrationandtheprovidingofunderlyingsecurityservice，therequirementanalysis，staticandd

8、ynamicmodelingofSecORBUSarepresentedinthisthesisusingthestandardobjectmodelingtoolofOMG，UnitedModelingLanguage(1rMI，)topointoutitsstructureandactionsTheSecORBUSsystemisimplementedinthree：theprovidingofunderlyingsecuriyse

9、rvicetheimplementationofSECIOPandthemodifvingofORBcore(includingtheimplementaionofobjectsrelatedtotheCORBAsecurity)MIT’sKerberosV5systemcanbeusedtoprovidtheunderlygingsecurity，SECIOPprotocolsitsbelowtheGIOPprotocolandpro

10、videsameansoftransmittingGIOPmessagessecurelySECl0Pmessagessupporttheestablishmentofsecuritycontextobjectsandprotectedmessagepassing，ObjectsrelatedtotheCORBAsecuritywilIcallGSS—APIbasedontheKerberosV5systemtoprovidesecur

11、ityfunctionalltiesA11thethreepartsarediscussedinthisthesisAtthelastpartofthethesis，weanalyzeandestimatetheKerberossystemandtheCORBAsecurityThe1imitationofKerberossystemandtheproblemsandweaknessesofCORBASecurityareprovide

12、d，atthesametime，someoptimizationwaysareprovidedforSecORBUSsystemfromtwopointsofview：underlyingsecuritymechanismandCORBAspecificationKeyWords：DistributedObjectComputingCORBASecORBusKerberosGSS—APIUMLNetworksecurityEncrypt