• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2002.05a
• /
• pp.477-480
• /
• 2002

Transparency of position that provide quick service regardless of physical position to users in distribution computing environment is getting into prominence and is developed in component form that many application softwares take advantage of distributed object technology. Because design object in distribution computing environment and OMG introduces OMA for embody, defined CORBA by standard of distributed object technology on OMA's abstract picture object model. Security service in CORBA platform is very important. Present object security service in distribution computing environment that refer standard of sorority and security models of distribution computing platform in CORBA in this treatise and follow in CORBA security service rules.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.8 no.4
• /
• pp.53-70
• /
• 1998

OMG(Object Management Group) 에서는 CORBA(Common Object Broker Architure) 환경에서의 보안 문제를 해결하기 위해서 CORBA 보안 서비스$^{[8]}$ 를 정의하였다. CORBA보안 서비스는 다양한 보안 기술을 허용하는 보안 구조를 제안하고 있으며, 사용자 인증, 접근제어, 보안 통신 등에 필요한 보안 객체를 정의하고 있다. 또한 CORBA환경에서 수행되는 응용들에게 투명한 보안 통신을 제공하는 것을 기본으로 한다. 본 논문에서는 ECMA(European Computers Association) SESAME(a Secure European System for Application in Multi-vendor Environment) Ver. 4$^{7}$ 를 사용하여 CORBA 환경에서 수행되는 응용들에게 보안 통신을 제공하는 것에 중점을 둔 CORBA보안 서비스의 설계및 구현관리 기능 등을 제공하는 보안 소프트웨어인 SESAME Ver. 4에서 제공하는 GSS-API(Generic Security Application Programming Interface)$^{[9,10,11]}$ 를 사용하여 CORBA 환경에서 보안 통신에 필요한 보안 객체들을 설계 구현하였고, CORBA 환경을 위한 전체 보안 구조를 제시하였다. 본 논문에서 제시한 보안 구조는 보안 통신을 제공하기 위해 구현된 보안 객체와 SESAME Ver. 4에서 제공하는 인증, 접근제어, 보안 정책관리 기능을 통합한 형태이다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.7 no.3
• /
• pp.79-94
• /
• 1997

OMG (Object Management Group) published a security service specification, called CORBA (Common Object Request Broker Architecture) security reference model because the integration of security and object-oriented techniques was critical for successful deployment of distributed object systems. The CORBA security reference model treats access control as an implementation independent semantic concept but has incomplete semantics of the access control function. Because of such imcompleteness it is difficult for the system administrator and the CORBA security implementor to have the same understanding for the meaning of access control in the CORBA security. We propose a formal model for access control the CORBA security using the formal description language, which is called Z language based on typed set theory. The proposed model provides concrete semantics of the access control function to both the system administrator and the implementor.

• Convergence Security Journal
• /
• v.5 no.3
• /
• pp.15-22
• /
• 2005

The spread of Internet and the appear of Downsizing, SI(System Integration) is chaning centralized computing to distributed computing. Also distributed computing is rapidly changing to Ubiquitous computing escape from hard wire connected network. CORBA(Common Object Request Broker Architecture) is a middleware that used for smoothness communication between application program and operation system in a different environment. However distributed computing environment is not safe from the danger, the attack like virus, worm is too intellectual and variety. In this paper, we design a new DB security model and suggest efficiency of it in Ubiquitous environment base on CSS(CORBA Security Service) that present ed from OMG(Object Management Group).

• Journal of KIISE:Computer Systems and Theory
• /
• v.26 no.10
• /
• pp.1237-1247
• /
• 1999

이질적 분산 환경에서 전자 상거래는 신임장을 기반으로 상거래 참여자들에 대한 인증 서비스가 제공되어야 한다. 본 연구에서는 CORBA 보안 명세 1 를 기반으로 전자 상거래 참여자들에 대한 객체 단위 인증 및 권한 부여 기법을 제공하는 상호 인증 서비스 구조를 제안한다. 이 구조는 Kerberos 2 의 인증 기법 및 인증 키 교환 기법으로 전자 상거래 참여자간에 상대 주체의 신원 확인 뿐 아니라 거래 진행 중 취득한 정보의 근원을 파악할 수 있도록 하였다. 또한 Kerberos 기법을 CORBA 플랫폼 기반의 상호 인증 구조로서 분산 환경에 대해 확장하였으므로 키 관리 등 보안 정보 관리에 있어 효율적이다.Abstract Electronic commerce shall provide its subjects with a credential-based authentication service in the heterogeneous distributed computing environment. In this paper, based on CORBA security service specification 1 which OMG defined, we propose the mutual authentication service for subjects of electronic commerce, providing the authentication of object level and the authenticated key exchange. This proposed structure, by Kerberos 2 for the authentication and the authenticated key exchange, assures not only the identification of a partner but also the confidence of origin of business item for negotiations between subjects of electronic commerce. Since our deployed Kerberos is extended to the mutual authentication service based on CORBA platform, it is efficient for security administration to manage the information such as a key management in the heterogeneous distributed computing environment.

• The Transactions of the Korea Information Processing Society
• /
• v.6 no.11S
• /
• pp.3278-3288
• /
• 1999

This paper proposes a security platform, called SCAP(Security platform for CORBA based APplication), to cope with potential threats in a distributed object system. SCAP supports CORBA security specification announced by OMG. SCAP is comprised of four functional blocks, which co-work with ORB to provide security services: Authentication Block, Association Block, Access Control Block, and Security Information Management Block. It is designed to support Common Secure Interoperability Functionality Level 2, which is useful for large-scale intra-, or inter-network based applications. Actual security services, which are dependent on supporting security technology, will be provided as external security service for replace ability. Implementation issues such as how to simulate an interceptor mechanism using a commercial ORB product without source code, and how to extend Current object required for security services are also described. At the end of the paper, the SCAP applied to the web environment is described to show its practical utilization.

• Journal of KIISE:Databases
• /
• v.27 no.1
• /
• pp.33-41
• /
• 2000

Since simple and convenient user interface, the Web is diffused widely. For integrating Web as a view of user interface and CORBA, CORBA object is made in applet, which is sent to Web browser in Client and executes by Web browser. To use CORBA Event Service in Web without violating a security constrains of applet, we need a interoperability of Event Service. This paper investigates interoperability of event channels of the event service of CORBA. We present three different methods that make one event channel. Pros and cons of each method are described. All mentioned approaches have been implemented in Java. An experimental performance evaluation has been carried out and evaluation results are also given.

• Journal of Internet Computing and Services
• /
• v.2 no.3
• /
• pp.93-98
• /
• 2001

It is difficult to develop Electronic Commerce System due to expansion, maintenance and repair of the system. In this paper, the author proposes 3-Tier structure Stock Market Management System using JAVA and CORBA. The event service of CORBA supports the interactive environment. For improvement of expansion, performance, security, maintenance, repair. and efficiency, the 3-Tier structure Stock Market Management System is implemented using CORBA and JDBC middle ware in this environment.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2002.04a
• /
• pp.699-702
• /
• 2002

분산 객체 컴퓨팅은 인터넷의 활성화와 더불어 각광받고 있는 분야중의 하나이며 많은 응용 소프트웨어들이 분산객체 기술을 이용한 컴포넌트 형태로 개발되고 있다. 분산 객체 컴퓨팅 기술을 기반으로 한 CORBA는 새로운 세대의 분산 컴퓨팅 플랫폼이며, 보안은 항상 분산 컴퓨팅 플랫폼의 기본적인 문제이다. 따라서, CORBA 플랫폼에서의 보안 서비스의 적용은 매우 중요하다. 본 논문에서는 보안의 표준들과 분산 계산 플랫폼의 보안 모델들을 참조하여 CORBA 보안 서비스 규약에 따르는 객체지향 분산환경에서의 객체보안 서비스를 제시한다.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2002.11a
• /
• pp.893-898
• /
• 2002

Integration with CORBA and mobile agent is improving various kinds problems that are happening in distributed system. This technology is guarantee the interoperability to other agent platforms and extend the mobile agent system but appears various kinds problems of suity. In this paper, we propose the mobile agent security system that is based on CORBA security service specification and MASIF. Since Proposed system is based on CORBA and MASIF, it is extend the large scale of distributed system and interoperable with other agent platforms.