目前大部分已实现的信任管理系统主要存在如下问题:(1)实现没有遵循Web服务规范,难以应用于基于Web服务的应用系统安全保障;(2)其核心部分信任管理引擎的运行效率较低,往往无法满足高度变化的应用环境对安全决策及时性的要求.为此,我们遵行Web服务规范,基于移动Agent技术,使用java语言实现了一个高效的,面向Web服务的信任管理引擎以较好地满足开放、动态环境中基于web服务的应用系统的安全保障需求.信任管理引擎的主要工作是截获用户向web服务提出的访问请求,派出移动Agent进行信任链的发现以判断该访问请求是否合法.其中信任链的发现部分采用信任链双向搜索算法实现,以提高整个引擎的运行效率.
Most existing trust management systems have two main problems,(1)hard to provide security guarantee for web resources since their implements do not comply with Web Service standards; (2)the chief trust engine runs at a low efficiency, cannot fulfill demands of on time security policy in the all long changeable environment. We use java language to design and implement a trust engine oriented to Web Service based on mobile agent to satisfy security demands in the open and dynamic web environment. The main work of trust engine is to verify whether a web resource can be visited by some client. We use mobile agent to do bidirectional trust chain discovery to improve the efficiency of the trust engine.