Design And Implementation Of The SSL-based Security Service For ORBit

ORBit is an opensource implementation of CORBA 2.2 standard, and acts as the low level communication layer in GNOME component architecture. As a distributed component platform, current ORBit does not provide any security service, which is an elementary feature for most commercial application system. This paper first introduced CORBA and CORBA Security Services Specification (CSSS), analyzed the CORBA's security reference model and architecture, then adopted a SSL-based solution. After a brief introduction of the opensource implementation of SSL－OpenSSL and its programming paradigm, the paper designed the security service for ORBit and provided the IDL definition of the main security objects. The design was based on the security reference model of CSSS, the architecture of which is a subset of the CORBA security architecture. Lastly, the paper took large efforts to analyze the ORB connection management, ORB pseudo-object, object reference, and IOR for ORBit. Based on the analysis, the paper implemented the SSL-based security service for ORBit by modifying and complementing the ORBit source..