"Java Security Technology Exploration Path series: Java Extensible Security Architecture": Java Extensible security Architecture begins

Guo Jia
Email: [Email protected]
Blog: http://blog.csdn.net/allenwells
Github:https://github.com/allenwell

The Java platform provides a scalable security architecture model using standards-based, secure API technologies that provide platform independence and enable interoperability between different vendors. These API technologies add a variety of security features to the core Java platform through technology integration to support cryptographic algorithms, certificate management, authentication authorization, secure communications, and other custom security mechanisms.

As part of the J2SE composite package, the Java Extensible Security architecture provides the following API framework and its implementation to ensure end-to-end security for Java applications.

• Java Cryptographic Architecture (Java cryptograp Architecture): Provides basic cryptographic services and cryptographic algorithms, including support for digital signatures and message digests.
• Java encryption Extension (Java Cryptographic Extension): enhances JCA functionality with cryptographic services that comply with U.S. export control regulations, supports encryption, decryption operations, supports key generation and negotiation, and supports message verification code algorithms Authentication Code).
• Java Certificate path (Java certification path): Provides the ability to check, validate, and confirm the authenticity of the certificate chain.
• Java Secure Sockets Extension (Java Secure Socket Extension): Secure communication by using the SSL/TLC protocol to protect the integrity and confidentiality of data exchange.
• Java Authentication and authorization services (Java Authentication and Authorization service): Verifies the identity of a user or device to determine its authenticity and trustworthiness, and then provides access based on its identity. It facilitates the use of pluggable authentication mechanisms and user-based authorization.
• Java Universal Security Service (Java Generic Secure): Provides the ability to develop applications using a unified API that can support a variety of authentication mechanisms and facilitate single sign-on.

The Java Extensible Security architecture and its core API are as follows:

"Java Security Technology Exploration Path series: Java Extensible Security Architecture": Java Extensible security Architecture begins