Distributed Multilayer Application System And Its Security Control: Research And Application

Distributed multilayer application system is developed from traditional C/S and B/S architecture.And it is the development direction of the current application. The advantage of the distributed mulitlayer application system architecture is that the system can be maintained and managed easily, the flexibility and expansibility can be added, the security of system can be strengthen,object can be reused, resource using rate is high and the system development rate is high.There are many researches about the distributed technology area, and the research contents including the following: software system architecture, distributed database,development technology,development methods,etc.In these days of network information,information security technology is playing the key role. The researches of network security system and security technology have been entered a brand-new phase, and many security productions have been come forth.But the security problem of distributed multilayer application system is rarely has special researches. In distributed system, the whole system lies in distributed envionment, and its security is more complex than stand-alone application system. There are many components with different functions in system, and these components contact and operate each other. When one component is calling the service provided by the other component, it maybe used by another one. Moreover, we don't wish that everyone can use the business object which provide different services. Only the person who has the privilege can use the business object. In addition, it may be allowed that the inside personnel and the Internet/Intranet user can use the system service in the same time. From the point above, we can see the necessity of considering the security problem of distributed mulitlayer application system.For the cause of the favorable application foreground of distributed system and the importance of its security, I think that do some researches about distributed multilayer application system and its security have very important practical meaning. This paper make the distributed multilayer system architecture based on the COM/DCOM/COM+ distributed objec technology of Microsoft as its core. In this paper, the development course and the research status quo of distributed multilayer application system is analysed, the component technologies and the security of components and communication protocol of components in distributed multilayerapplication system are simply introduced, several popular distributed object technologies are compared. After the usual construction way of distributed multilayer application system is given, the security guarantee methods of distributed multilayer application system is explored and researched. We put forward a systemic,full-scale and step by step guaranteed security model of the distributed multilayer application system. This model guarantee the distributed multilayer application system from the following: operation system security, network security, server security,application program security,database security, security management and computer virus prevention. In this paper, the author put forward the idea of combining the security of distributed object technology and the other security technologies. This security model have guidance significance of developing the security distributed multilayer application system in som degree. In addition, the cipher technology, the certificate technology and RBAC technology are simply introduced also. On the basic of our security model and under the precondition of knowing some security technique, we combine the characteristic of actual application envionment and developed a secure archives system of electronic government. The secure archives system is constructed on the structure of distributed multilayer system with COM/DCOM/COM+ technology as its core and has an very strong security guarantee system. After introducing the whole architecture and function of this system,we give the system security guarantee mechanism as an emphases. Refe...