CORBA-Based Open Authentication Support Service of Electronic Commerce

In this paper, based on CORBA security service specification [4] which OMG defined, we propose the open authentication support service for subjects of electronic commerce, providing the authentication of object level and the authenticated key exchange. This proposed service, by Kerberos [5] for the authentication and the authenticated key exchange, assures not only the identification of a partner but also the confidence of origin of business item for negotiations between subjects of electronic commerce. Since our deployed Kerberos is extended to the open authentication support service based on CORBA platform, it is efficient for security administration to manage the information such as a key management in the heterogeneous distributed computing environment.