A Security Middleware Logic Design And Interface

With the rapid development of the information technology today, information security is an inevitable problem of network application. Ensuring confidentiality and integrity of the data, authentication and non-repudiation of the communication partner must be guaranteed. Security middleware solves the problems of the cost, the availability and the interoperation of traditional information security. It combines the security technology with the middleware technology, separates the security module from the application software and become common usage software, thus improves the reusable of the software. In this background, this paper aims to research the logical design and interface realization of security middleware, provide several interfaces for the application layer, realize the pivotal function of the bottom, as to improve the reliability of the whole system.Firstly, by researching on the basic theory--cryptograph theory and Public Key Infrastructure, referencing the layered model of CDSA security middleware, this paper found a kind of design scheme, then in the realization part, it used OpenSSL library to realize several related interfaces of security middleware, including cipher service module and certificate service module, so as to provide some usable interfaces to the application layer. By using the strongpoint of Object Oriented thinking to design, this system overcomes the defect of OpenSSL, it can extend expediently and be used repeatedly and strongly.Finallly, by testing and analysing the modules of security middleware in the paper, it shows the interface of security middleware realize multifarious cipher service and certificate service, this system is with preferable flexibility, expansibility and retractility.