对象请求代理 ( ORB)安全服务的核心是身份验证、安全调用与访问控制 .介绍了基于 X.50 9身份认证框架的实现技术 ;身份验证实现对客户宣称的身份真实性认证 ,而安全调用在消息级对数据连接进行数据流加密从而保证在网络中传递请求与响应的安全性 ,介绍了安全调用拦截器的结构及功能 ;访问控制实现了对对象的调用进行权限约束 .描述了访问允许判定过程 The core of ORB security service is authentication, security invocation and access control.It describes the implementation technology based on X.50 9 authentication framework, and the authentication implements the authentication of the client’s claimed authenticity, while the security invocation The message level encrypts the data connection to ensure the security of request and response in the network, introduces the structure and function of the security call interceptor, and the access control implements the permission restriction on the object invocation. process