Proposal for INFOSEC Computer
Science Research into Distributed Object Computing Security
A Java Implementation of CORBA
Security Services
Statement of work
Extend our JGSS package to support the SESAME-based authentication and
delegation protocols. This package will provide the SESAME-based
ECMA GSS-API supporting CSI (Common Secure Interoperability) level 2.
Reimplement the SESAME authentication and delegation protocol entirely
in Java
Implement the ORB object level access control, delegation and audit security
objects required by the OMG ORB level 2 security service 1.2 using standard
Interceptor interfaces
Implement dynamic interoperable security policy objects and policy decision
objects for the Secure ORB to support security policy and service runtime
replacement and interoperability
. Demonstrate
the conformity of this implementation to CORBA Security Service 1.2, the
interoperability with other CSS 1.2 compliant implementation including
the SmallTalk implementation, and runtime configurability in a mobile
computing environment