The Design And Implementation Of Overload Control Mechanism Based On EC Secure Middleware

The rapid development and extensive application of Internet technology have changed human traditional trading methods and concepts. The security and efficiency of EC, built on high-speed and open-Internet, are always the popular topics in theory and practices. This research topic is deployed on these backgrounds.In this paper, security mechanisms, authentication and authorization of J2EE are intensively studied, the mainstream technologies of building secure middleware in EC, which is based on PKI and SSL, are summarized. Combined with the modeling-analysis of Petri net on secure protocol, aiming at the efficiency problems in internet secure transactional model, the overload control mechanism based on session-resumed and session classification is proposed, to optimize system performance, enhance application security and interactive efficiency, strengthen the competitiveness and influence of business site.Based on the design method,project and functional partitioning of secure middleware overload control mechanism, building Certification Authority by OpenSSL, realizing the Identify Authentication by JSP, and the process of Digital Signature are discussed significantly in this paper. According to the design of database and classes, the method of database connectivity, realizing of JavaBeans and Servlet is analyzed, the detail process of using tool-class and DWR to realize overload control mechanism is given.In this paper, the virtual environment is built, in which we can use LoadRunner to simulate users' visitation for the purpose of testing the process and effects of overload control mechanism by two different ways. According to the comparative analysis, the average response time is sharply reduced, the efficiency of EC site is raised by the overload control mechanism based on Session classificationAt last the completed work is summarized, and the further research expectations are given.