cgl.narada.service.security
Class SecureTopicsManager

java.lang.Object
  cgl.narada.service.security.SecureTopicsManager

public class SecureTopicsManager
extends Object

The purpose of this class is to keep track of currently available secure topics. The manager listens on a KMC broadcast topic. The KMC broadcasts a message whenever a new security token is created. The KMC may also publish information regarding revoked certificates, invalidated security tokens etc..
The manager also provides interface to validate security tokens and digital signatures of payloads in secure NB events
Created on Sep 10, 2005

Field Summary

static String

HEADER_SIGNATURE

Constructor Summary

SecureTopicsManager()

Method Summary

boolean	doSecurityChecks(NBEvent nbEvent)
SignedSecurityToken	getSecurityTokenForProfileId(Object key) Returns the Security token corresponding to the given id
static long	getSignedTSSecurityCheckDuration()
void	init(String keyStore) Initializes the Certificate manager to load the location of keystore etc...
void	registerProfileSecurityToken(Object key, byte[] obj)
void	shutdown()
boolean	sysnopsisRepresentsSecureTopic(Object contentSynopsis, int type) Checks to see if the specified content synopsis belongs to a secure topic.
boolean	verifySignedSecurityToken(SignedSecurityToken sst) Check the validity and integrity of a signed security token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HEADER_SIGNATURE

public static final String HEADER_SIGNATURE

See Also:

Constant Field Values

Constructor Detail

SecureTopicsManager

public SecureTopicsManager()

Method Detail

init

public void init(String keyStore)

Initializes the Certificate manager to load the location of keystore etc...

Parameters:

configFileName -

shutdown

public void shutdown()

doSecurityChecks

public boolean doSecurityChecks(NBEvent nbEvent)

sysnopsisRepresentsSecureTopic

public boolean sysnopsisRepresentsSecureTopic(Object contentSynopsis,
                                              int type)

Checks to see if the specified content synopsis belongs to a secure topic.

Parameters:

contentSynopsis -

type -

Returns:

TRUE if the content synopsis refers to a secure topic, FALSE otherwise

registerProfileSecurityToken

public void registerProfileSecurityToken(Object key,
                                         byte[] obj)

getSecurityTokenForProfileId

public SignedSecurityToken getSecurityTokenForProfileId(Object key)

Returns the Security token corresponding to the given id

Parameters:

key - - Id

Returns:

Security Token if valid, NULL otherwise

verifySignedSecurityToken

public boolean verifySignedSecurityToken(SignedSecurityToken sst)

Check the validity and integrity of a signed security token. Finally determines if the requesting entity does indeed have subscribe rights

Parameters:

sst - - The SignedSecuritytoken to inspect

Returns:

TRUE if everything check out, FALSE otherwise

getSignedTSSecurityCheckDuration

public static long getSignedTSSecurityCheckDuration()

Returns:

Returns the signedTSSecurityCheckDuration.