Secure Systems Secure Java

ClearPath and Java platform technologies combine traditional mainframe strengths with open source economics and flexibility to deliver the ultimate business-critical Java environment. A Java runtime environment with ClearPath security, reliability, availability, manageability and recoverability provides the ideal platform for you to leverage and extend your core business systems using Java.

Integrated Java and MCP Security

The MCP operating environment provides many security features that align and interoperate with the Java platform’s security model and specifications. Our integration of Java and MCP security gives your Java based applications exceptionally high, enterprise-class protection from virtually all known security vulnerabilities when run on your ClearPath system.

• All Java Virtual Machine (JVM) access to files goes through the highly secure MCP Common Internet File System (CIFS).
• Security events such as authentications, violations, file accesses and database accesses are logged in detail. This provides levels of auditability and accountability that far exceed the capabilities of Java EE implemented on other platforms.
• Both the Java environment and the MCP native environment are protected by the comprehensive, architecturally-based set of MCP operating system and hardware security mechanisms. It’s these mechanisms that prevent the unauthorized or accidental misuse of computer memory and processing instructions. And they just aren’t available in other Java EE implementations.

Role-based Access

Login modules are included with Java platform and MCP security integration that comply with Java Authentication and Authorization Services (JAAS) and provide user-id/password authentication. Java EE role-based and MCP security models are also integrated for authorization.

The Java EE container controls access to container objects, methods, etc. MCP also controls Java platform access to applications, transactions, database components and other system resources.

MCP provides access controls at the database level, such as:

• Database procedures
• Grant/revoke privileges
• Guard file records

Such access controls protect data objects, securing your data against a misbehaving or incorrect Enterprise Java Bean (EJB). These extra controls also deliver security that exceeds any standard Java EE implementation.