Abstract

: CORBA based middleware has been used for the last couple of years mainly for bringing the old legacy applications into the web age, but now this role has begun to change, as new applications are built on top of it. Together with this change, legacy based access control along with other security functionality has to be converted from the centralized mainframe world into the distributed Internet world. This change needs solutions which are originally designed for distributed environments. Among these solutions are SPKI authorization certificates defined by the IETF working group. In this paper, we present a way of implementing authorization in CORBA based distributed applications with SPKI certificates. We discuss the potential advantages of this approach compared with traditional access control list based solutions and also describe an architecture which we have implemented in our project. 1. INTRODUCTION The powerful communications infrastructure provided by the Internet has for t...

Citations