This paper is an attempt to analyse the security architecture of J2EE distributed system and introduce authentication and authorication and authorization service in the J2EE platform specification.We discuss the Java 2 security platform,and point out some problems that should be considered in the realiza...