The Design And Implement Of Service Oriented Cross Domain Access Control System

As the development of the Internet in the past several tens of years, many kinds of Internet applications updated quickly, governments, departments and enterprises developed many applications according to their owns requirements and published on the Internet, These applications have their owns development language and architecture as long as different security methods, which make these applications like "information Island" in the Internet. But it is emergence that those scattered applications to communication with each other as the development of technology.The Technology of Web Service is the newest subject of distributed computing which based on XML. XML offers a simply method to classify the message and data, which is common,cross-platform and supports Web operation directly, and the format of the message and data can be changed freely which in the form of XML,meanwhile XML can support all kinds of lower transport protocol. At last we can expand XML,which can solve the problem of security of the message and data that based on XML.So when the services are underlying the cross-domain access, it is possible that the share of message and the exchange of data that based on XMLIn this paper I first introduce the background of technology of cross domain access, then I introduce the enterprise service bus's(base on JTangSynergy) architecture and key technology which can support cross domain access, so I present the model of cross domain access base on ESB. The key point of this model is authentication, authorization and security agent, which is also the key research point of this paper. The third chapterⅠintroduce the authentication and authorization model, which integrates JtangPKI and JtangPMI.also I make this model to be a service component of JtangSynergy. The forth chapter I introduce the security agent model. This model intercepts the message of cross domain access, first does some security check, then makes some necessary change of the message form, then finds the right service and returns the results. The fifth chapter I will give the realization of the system. At last I will show you a example of the system.