applications and some relative services, for examples of essence of access control is that the subject access to
JNDI Java Naming and Directory Interface and JMS objects is limited, whether a subject can access the object
Java Message Service etc. according to the subject access right[9,10].
J2EE provide a development standard for applications,
the application can be no hard-coded security strategy, so
applications can be bind with a declarative security
strategy and put it into application components assembly
sets. The security model using J2EE security strategy
can be applied to any operating environment which is
compatible with J2EE, and it can be deployed in any
application server which is compatible with J2EE. In the
J2EE security model, identification and authorization and
data integrity and data confidentiality etc mechanisms
have been comprehensive applied, and the model has
been used in various layers of the architecture to ensure
the safety of the whole system. In the J2EE environment
component safety is responsibility of the container which
the component is in it, when the programmers develop
the component procedure, the safety code was not or
seldom considered. Just for the safety logic and business
logic are relatively independent, the enterprise
applications in the J2EE environment can get a good
JSP and Servlet in the Web container accept the HTTP flexibility and expansibility .The J2EE security model is
requests from the clients and response them, and then role based model, in the model, the resource access right
send the treated client information to the Beans of EJB to is assign to the roles and each role assigns the right to
encapsulate. its users. To check whether the user has access right, the
The EJB container is mainly composed of EJB server checks which role does the user belongs to and
application components based on J2EE. the EJB whether roles have this right. When there are interactions
component is a server-side component, it allows to between the client-side container and the EJB application
develop distributed object-oriented enterprise server, the security mechanism provides two ways to
applications in Java. and to simplify the whole realize the interconnection, they are authorization
developing process. The business logic codes to solve or interface and Authentication interface.
to meet some special fields were performed by the J2EE platform provides a simple development
Enterprise beans which running in the EJB container. environment for programmers, it is expansible and easy
The session bean is a kind of business process to integrate with existing system and Legacy system. At
component, it represents business process object, it the same time, programmers can flexibly select the
executes the business logic, arithmetic, rules and the servers, the tools and other components according with
business workflow, it is a reusable component with themselves demand. And then, it provides some system
business process logic. At a given time, session bean is level services such as naming, transaction and security.
available for only one client and can’t be shared with In these services, transaction is a kind of very important
other clients. items in J2EE, one of the transactions API (Application
The Entity bean is a kind of data component, it Program Interface) provides various interface to meet
represents database or data object of enterprise different user demands.
applications, in this Bean, the bottom data is mapped to J2EE container also provides audit functions in order
the memory in form of object for the other components to facilitate the container evaluate the security strategy
use. In essence, the entity Bean have the function to imposed to itself, it is a security-related event logging
implementation the data access logic. behavior to enable the user or the system accountable for
The interaction between the Web container and the their actions.
EJB container is realized by means of RMI Remote
Method Invocation/IIOP Internet Inter-ORB Protocol .In . THE EAI INTEGRATION FRAMEWORK BASED ON THE
which ORB Object Request Broker is a kind of
middleware that can locate service object and use it. A The Enterprise applications integration framework
The Database layer consists of one or more Database based on the J2EE platform
systems, and in which, it may be include stored procedure J2EE platform has its advantages of powerful
and data access relative logic model. The middle layer transplantable capability and good cross platform
connects the distributed heterogeneous database via capability, it has advantages of good maintainability and
JDBC Java Database Connectivity . high security. The relative Independence between
B The Security Mechanism of J2EE Architecture different layers in J2EE architecture make it more agility,
the component and OOP have been introduced to make
Access control is the core of J2EE security service, the
the models easy to reuse, so programming in the J2EE specific DBMS. It provides the common mechanism that
environment can simplify the developing procedure and access to SQL database and storage structure, a common
increase the programming efficiency. J2EE connector bottom application programming interface that support
architecture can lessen integration area and simplify the basic SQL function. J2EE components are easy to
application development, and EIS integration by means implement the migration between various vendor
of developing tools becoming easier. So that, products that the J2EE-compatible container/server.
combination of J2EE platform and J2EE connector J2EE Connector architecture defines a series of
architecture to complete the EAI(as shown in Fig. 2), can mechanisms called agreement, that ensure the EIS and the
provide a useful reference for drafting an EAI application server and enterprise applications can be
solution and give an advanced practicable method for integrated easily. At the same time, these mechanisms are
constructing an enterprise system in a more rapid and between the J2EE application server and EIS, and they
more effective way, nd select a good platform for have been designed to be scalable, secure, and transaction
developing enterprise level server-side program in the oriented. The connector architecture also defines a client
EAI project. interface API, allows J2EE application components
access different EIS structures.
If EIS vendors want to join the connector system, he
must support the connectors agreement which provides
the EIS resource adapter can be embedded into the
J2EE-compliant application server. J2EE Connector
system is a integration technology based on J2EE. So
that , application integration project will not only be able
to connect to an existing enterprise systems, but also be
able to connect to the Web and other applications. The
connector system is mainly used to simplify the
integration of J2EE components and the EIS integration
B the J2EE key technologies in the integration
For enterprise level distributed applications, J2EE
defines abundance of technical standards, and defines
responding development tools and API according to these
standards, so it provides a strong support for the
The client layer downloads static HTML pages or
development of enterprise-level applications. These
dynamic HTML pages which generated from JSP or
technologies include database access, distributed
Servlet, runs a independent client program or Applet
communications, native interfaces etc[13,14,15].
programs oriented network, and accesses Enterprise
Java Native Interface: Java Native Interface (JNI) has
Beans bypass representation layer.
been integrated into the standard J2EE platform, this
The middle layer includes two layers, they are the
allows Java code directly interacting with local shared
representation logic layer and the business logic layer.
binary libraries of a specific operating system and
The representation logic layer consists of JSP pages hardware platforms. so JNI provides a method can
Applets and Servlet which can display HTML pages. It integrate traditional application codes written in other
calls Servlet and HTML page corresponding to the JSP languages to Java enterprise applications. If C or C++ is
page, and pack them with Web component when the target platform language, create a JNI-based code
applications were composed. The business logic layer conversion is very convenient, because Java platform has
reflects and deals with business process, business codes provided the code conversion support of these languages.
to resolve or to satisfy a special field were executed by Deficiencies of using JNI is that memory resources and
the Enterprise Beans in business logic layer. the thread resources in JNI and threading code values in
The enterprise information system layer runs enterprise shared libraries are managed in different ways, we must
information system software, such as ERP(enterprise carefully consider the mismatch problems of these
resource planning), PDM(Product Data Management), resources when we using JNI. Therefore, using JNI as the
DBMS(DataBase Management System) and other Legacy main method of EAI solutions is suitable for simple
information systems. enterprise application integration.
Servlet is a server side program written in Java, it has EJB technology: EJB is an important part of J2EE, it is
mainly functions which to browse and to modify data a server-side component, which makes use Java language
interactively, to generate a dynamic Web content, and it to develop distributed, object-oriented enterprise
is independent of the protocols and platform . JSP bases applications, and can simplify the whole development
on the text, generates a Servlet by means of container, so process. usually ,EJB components cannot run separately,
the content and its display is separated in it. EJB defines a but running in EJB container. EJB container is running
Bean class component and relates to the Web layer via environment that the EJB component exists and executes,
distance call. JDBC is a interface independent of the it manages the EJB components include its security, its
concurrency, its transaction management and other details, the technology details point of view, there are some
so EJB components is free from the constraints of the shortcomings and deficiencies. For example, if you
server relevance ,the application system can be developed wanted to improve integration performance, you must
in an EJB environment, and then be deployed in other develop applications with a large number of robust codes.
environments, and with the change in demand, In the framework of each component must be able to
application systems can be migrated without modification manage the data which in it and a variety of business
to other more powerful, more complex server. Using EJB rules with the correct method, and implement business
component technology can effectively carry out software constraints.
reuse and improve developer productivity and reduce
software costs in development and maintenance, improve REFERENCES
software quality and reduce the complexity of systems
 Linthicurn D. Enterprise Application Integration.
construction. Addison-Wesley, 2000.
Database Access: Whether the traditional enterprise  Ma Bin,Cai Ming etc. Research and Implementation of
information systems or in the future, databases occupy an Enterprise Application Integration for Networked
important position. Development of distributed system Manufacturing. Application Research of Computers,
requires database access with good flexibility and 2005(4): 35-38.
scalability. JDBC is an interface that is independence of  Gu Yi, Zhang Shensheng, Zhu Xiangfei. A Study of
the specific database management systems. It provides a Enterprise Application Integration(EAI) Solution.
common mechanism to access SQL database and storage Computer Engineering and Applications,
structure, and provides a common bottom application
 Wang Run-xiao,Yin Lei, Lin Hong. Research of Enterprise
programming interface to support the basic SQL function. Application Integration Model for Collaborative Product
It is provides a uniform user interface for different Commerce. Mechanical Science and Technology, 2004,
database and provides a variety of database connection. 23(12): 1491-1493.
JDBC API provided by J2EE makes a variety of database  Xie Xiaoxuan, Zhang Hao etc. Enterprise Application
operations easy and feasible. Integration:Overview. Computer Engineering and
Distributed Communication Technology: J2EE Applications, 2002(22):1-4.
framework provides a variety of communication modes  Wei Yin-xing, Zbang Shensheng etc. Research on
for web applications and EJB applications. Java RMI Enterprise Application Integration Technology. Computer
Integrated Manufacturing Systems, 2002, 8(8): 593-596.
(Java Remote Method Invocation) can implement the
 Cai Ming Chen Yongyun. Research and Application of
distance communication between Java objects. Java IDL J2EE Platfor. Computer Applications and
(Java Interface Definition Language) can implement the Software,2004,21(1):42-43.
distance object communication that met to CORBA  Wang Weiping, Wang Songtao etc. A lightweight EAI
(Common Object Request Broker Architecture) Architecture Based on J2EE,Spring and Hibernate.
specification. JNDI (Java Naming and Directory Interface) Applications of The Computer Systems, 2005,11:38-4.
provides a standard naming interface to access remote  Hu Haiyan, He Guiming. J2EE Security Mechanism and
objects in distributed systems. JMS (Java Message Application. Computer Applications, 2003,12(23):
Service) defines a set of specifications for developing 153-154.
 Zhao Zhongmeng, Shen Haibin etc. Analysis and
messaging middleware applications. Java clients and Java
Implementation of J2EE Application Server Security
middle layer accessing JMS messaging system implement Service. Computer Engineering and Applications,
a complex application as long as of the definition a JMS 2003(21): 175-177.
simple interface without paying attention to the  Rahul Sharma, Beth Stearns, Tony Ng. J2EE Connector
underlying technical details. Architecture and Enterprise Application Integration.
Beijing: Electronics Industry Press, 2003.
. CONCLUSION  Hu Shou, Chen Dingfang ,Tao Dexin. Research and
Application to Enterprise Information System Based on
An open enterprise application integration framework J2EE and PDM. Journal of Wuhan University of
based on the J2EE platform, not only can meet the needs Technology (Transportation Science & Engineering),
of enterprise application integration, but also can 2004, 28(3):395-398.
minimize the complexity of enterprise application  Ning Qian,Yin Guo-fu, Song Cui-jia. Technology of
Enterprise Application Integration Based on Java.
integration because it introduces Web Services support, it
Application Research of Computers, 2004(2):124-126.
can improve the flexibility of the system too. The  Xu Datang. Application of Integration Technology of
implementation of EAI software, not only largely J2EE. Modern Computer, 2002, 5(139):32-33.
eliminates information discontinuous between different  Ed Roman, Mastering Enterprise JavaBeans and the Java2
information systems communication so that they can Platform. Enterprise Edition, 2002.
achieve very good seamless integration, but also truly
reflects its functions in the enterprise management. From