电子商务安全中间件负载控制机制的设计与实现

发布时间：2019-05-20 02:45

【摘要】： 网络技术的飞速发展和广泛应用,从根本上改变了人类的传统交易方式和观念。建立在高速、开放的因特网上的电子商务,其交易安全与交易效率一直是理论和实际中的热门研究课题。本文的课题研究正是基于这一背景展开的。论文深入研究了J2EE安全机制、身份认证与授权,总结了在电子商务中基于PKI和SSL构建安全中间件的主流技术。结合安全协议的Petri网建模分析,针对网上安全交易模式中的效率问题,提出了构建会话恢复及连接分类的负载控制机制,以优化系统性能,提高应用安全和交互效率,增强商务网站的竞争力与影响力。基于构建安全中间件负载控制机制的设计模式、方案和功能划分,论文重点讨论了采用OpenSSL工具建立CA中心,使用JSP实现身份认证、数字签名的过程。根据数据库设计,类结构设计,分析了数据库连接、实现JavaBean及Servlet的方法,给出了用工具类及DWR技术,实现负载控制机制的详细过程。论文介绍了建立模拟环境,采用LoadRunner工具虚拟用户访问,按两套方案分别测试负载控制机制的过程和效果。对测试结果的比较分析表明,使用会话分类负载控制机制能有效缩短服务器平均响应时间,提高电子商务网站响应效率。论文最后总结了课题所做的工作,给出进一步的研究展望。
[Abstract]:With the rapid development and wide application of network technology, the traditional trading mode and concept of human beings have been fundamentally changed. Electronic commerce based on high speed and open Internet has always been a hot research topic in theory and practice. The research of this paper is based on this background. This paper deeply studies the security mechanism, identity authentication and authorization of J2EE, and summarizes the mainstream technology of building security middleware based on PKI and SSL in e-commerce. Combined with Petri net modeling and analysis of security protocol, aiming at the efficiency problem in online secure transaction mode, a load control mechanism of session recovery and connection classification is proposed to optimize system performance and improve application security and interaction efficiency. Enhance the competitiveness and influence of business websites. Based on the design pattern, scheme and function division of the load control mechanism of secure middleware, this paper focuses on the process of establishing CA center with OpenSSL tool and using JSP to realize identity authentication and digital signature. According to the database design and class structure design, this paper analyzes the method of database connection, realizing JavaBean and Servlet, and gives the detailed process of realizing load control mechanism by using tool class and DWR technology. This paper introduces the process and effect of establishing simulation environment, using LoadRunner tool virtual user access, and testing load control mechanism according to two sets of schemes. The comparative analysis of the test results shows that the session classification load control mechanism can effectively shorten the average response time of the server and improve the response efficiency of e-commerce websites. At the end of the paper, the work done is summarized, and the further research prospect is given.
【学位授予单位】：西安建筑科技大学
【学位级别】：硕士
【学位授予年份】：2010
【分类号】：F713.36

【相似文献】