Borland VisiBroker® 7.0 - Borland Technical Publications

VisiSecure overviewVisiSecure overviewVisiSecure provides a framework for securing VisiBroker and BDOC. VisiSecure letsyou establish secure connections between clients and servers.VisiSecure for JavaVisiSecure is 100% Java and supports all security requirements of the J2EE 1.3specification. VisiSecure uses the Java Authentication and Authorization System(JAAS) for authentication, the Java Secure Socket Extension (JSSE) for SSLcommunications, and the Java Cryptography Extension (JCE) for cryptographicoperations. Most of the APIs for Java applications reflect the existing JDK or additionalJava standard APIs. Care has been taken not to duplicate APIs at the different securitylayers. In some cases, VisiSecure feature set exceeds the J2EE 1.3 securityrequirements.VisiSecure for C++VisiSecure for C++ offers similar feature as VisiSecure for Java. See Chapter 11,“VisiSecure for C++ APIs” and Chapter 10, “Security Properties for C++” for detailedinformation.PluggabilityVisiSecure allows many security technologies to be plugged in. Pluggability is providedat various levels. Security service providers can plug in and replace the entire set ofsecurity services and application developers can plug in smaller modules to achievecustom integration with their environment. The only layers which are not pluggable arethe CSIv2 layer and the transport layer which are tightly integrated with the internalimplementation of the VisiBroker ORB and interact heavily with each other.VisiSecure design flexibilityBorland has designed VisiSecure to work with a variety of application architectures, sothat it can support many different current and future architectures. However, whileVisiSecure represents a powerful security architecture, alone it cannot fully protectyour servers. You must be responsible for physical security, and configuring you baseweb server (host) and operating system services in the most secure manner possible.VisiSecure for Java featuresVisiSecure has the following features:■Enterprise Java Beans (EJB) Container Integration: VisiSecure seamlesslyintegrates EJB security mechanisms with the underlying CORBA Security Serviceand CSIv2. CORBA offers enhanced features to the security architecture of yourbean. By utilizing VisiSecure, you have additional options over the relatively simpleEJB security model.8 VisiBroker Security Guide