CORBA Security Service
Security Service defines a framework with functionality for authentication, authorization, encryption and auditing
- Security functionality is largely transparent to application
Defines only the interfaces - implementation can be chosen by ORB vendors
Many CORBA products don’t provide a proper implementation of the CORBA Security Service
We chose to use CORBA Security Service for
- Proving the ownership of authorization certificates
- Passing certificates from client to server
- Verifying the received certificates on the server side