The Research And Application Of Lightweight Structure And Its Security Controller

Along with the rapid development of network technology.the developing of Web-based enterprise application systems become popular.With the growing scale of the system, the system of data security is receiving greatly attention.So, software engineers have designed various authority management model to ensure that only authorized users can access certain sensitive data and information.Spring is a powerful and flexible lightweight Web framework, it can combine with a number of other open-source framework closely. However, the existing Spring framework does not provide security-related solutions. The Acegi security frame from the Open Source community provides a good solution for safety control of the Spring-based WEB application systems.In the Common enterprise applications, the authority is not very complicated and only a few roles, only after configuring the authority information in the XML configuration file, the Acegi security frame will allocate rights based on the role.However, in the large-scale enterprise applications, the authority species are dozens or even hundreds of kinds and demand is always changing. Therefore, the configuration work in the configuration file is not meet the real demand.because of the authority tables in Acegi frame are so simple that they are not applicable to complicated authority demand.So,i improve the Acegi security frame.This article aims to improve the Acegi security frame and put it into the lightweight frame, the major points are following:(1) Improve the Acegi security frame, and the improved framework can meet the demand which authority is complicated and changeable. A number of systems can use one set of user authentication and authorization mechanism to control user's access.(2) Reusability.The improved Acegi security frame can be easily reused in other software system.(3) Expansibility.Users can extend the improved Acegi frame according to their demand, it is also meet the trend of enterprise-level security.(4) Spring frame worked as the core of business, and integrated with the Struts frame and Hibernate frame.Join the improved Acegi frame to design a lightweight frame.(5) Detailed analysis of the specific business and functions needs of the "air-line booking system", using the extended and integrated framework to develop software system, programming and developing "air-line booking system" with five layers, loose coupling, easy to replant and extend.