基于随机响应队列的ActiveMQ安全应用

随着消息中间件在大型分布式系统中的广泛应用,消息中间件应用的安全性需要得到足够重视.文中分析了ActiveMQ传统共享响应队列应用模式中存在的安全隐患,提出了一种基于随机响应队列的消息中间件应用模式.在该应用模式中,响应队列名称由客户端随机生成,只有该客户端和服务端知道这个随机名称,因此这个随机队列很隐蔽且只能被该客户端独享,从而确保消息队列应用的安全性.文中给出了该应用模式的基本框架、操作流程和安全性分析,并运用理论计算的方法分析了该模式的运行性能.结论表明,在保证安全性的同时,该应用模式不会影响系统的运行性能.

Security Application of ActiveMQ Based on Random Response Queue

With the wide application of message-oriented middleware in large-scale distributed systems, its security should be paid more attention. This study analyzes the security risks in the traditional shared response queue application of ActiveMQ, and it proposes a message-oriented middleware application mode based on random response queue. In this application mode, the response queue name is randomly generated by user client. Only the client and server know the random name. The random queue is very hidden, so it can ensure security application of the message queue. The basic framework, operation flow and safety analysis of the application mode are given. The operation performance is analyzed by theoretical calculation. The conclusion shows that the security application mode does not affect the operation performance of the system.