Application Research Of The Java Authentication And Authorization Service

Authentication and authorization server is a very important part of the network application systems. JAAS (Java Authentication and Authorization Service) owns a lot of superiority in the aspect of the authentication and authorization server, it is subjected to the people's widespread approbation. So it is very important to launch the application research of JAAS technology.On the base of thorough discussing the J2EE (Java2 Enterprise Edition) security service, aimed at the existent shortage, it is necessary and important to enter into JAAS technology. The JAAS technique is analyzed in detail, including the fundamental constitute, the process of the authentication and authorization and the core classes of JAAS. On the base of the security demanded and authentication and authorization mechanism in a particular network application system——online marking system, the realizing of mechanism in online marking system is gave out; the architecture of Authentication and Authorization Server based on JAAS is designed, which includes session manager, safety authenticator, access controller, safety service manager controller, etc; at the same time, the design of the database on authentication and authorization server is provided. Finally, according to the character of the online marking system, the concrete technique and the main problem on how to realizing the authentication of the custom, the session management, the authentication management, the access control management and the safety service manager controller. Some program codes are attached for demonstrations.Adapting the JAAS technique to realizing the mechanism of authentication and authenticator, it gives a satisfactory solution for authentication and authorization management, lowers the difficulty of the follow-up development, and strengthens security performance of the online marking system. Therefore, it has certain of practical expansion value.