info.pppc.base.security

Class SecureSkeleton

java.lang.Object

info.pppc.base.system.Skeleton

info.pppc.base.security.SecureSkeleton

All Implemented Interfaces:

IInvocationHandler

Direct Known Subclasses:

DataStorageSkeleton, QueryProcessorSkeleton

public abstract class SecureSkeleton
extends Skeleton

The secure skeleton supports stack analysis.

Author:

Mac

Constructor Summary

Constructors

Constructor and Description
SecureSkeleton() Creates a new secure skeleton.

Method Summary

Methods

Modifier and Type	Method and Description
SystemID	getSource() Determines the source of a call using the current thread context.
void	invoke(Invocation msg, ISession session) Dispatches an invocation to the actual implementation.
boolean	isSecure() Determines whether the current thread is executed in a secure context.

Methods inherited from class info.pppc.base.system.Skeleton

getImplementation, setImplementation

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecureSkeleton

public SecureSkeleton()

Creates a new secure skeleton.

Method Detail

invoke

public void invoke(Invocation msg,
          ISession session)

Dispatches an invocation to the actual implementation. In addition to the method of the base class which simply calls the dispatch method, this method caches the session in a hashtable using the current thread. This allows the application to test whether the context of a call is secure and whether it has been issued by a particular source.

Specified by:

invoke in interface IInvocationHandler

Overrides:

invoke in class Skeleton

Parameters:

msg - The invocation that shall be dispatched.

session - The session object that denotes the stack configuration.

isSecure

public boolean isSecure()

Determines whether the current thread is executed in a secure context. This means that the call must either be passed directly from a local semantic plug-in or it uses the encryption plug-in which also authenticates the source.

Returns:

True if the context of the call is verified to be secure, false otherwise.

getSource

public SystemID getSource()

Determines the source of a call using the current thread context. If the call is secure, the source has been verified, otherwise the source may be manipulated by a malicious host. Note that the source may be null, if the session has not been passed properly to the invocation handler, i.e. if the semantic plug-in is broken.

Returns:

The source of the call that is executed using the current thread or null, if it cannot be determined.