高级检索

企业级信息管理系统认证统一管理的设计与实现

Design and Implementation of Authentication in Enterprise Information System

  • 摘要: 针对企业级信息管理系统中认证管理存在的数据访问安全与便捷性的矛盾,通过设计并实现了具有多重认证为统一认证中的增强型功能的4A子系统,实现用户权限的角色控制,通过构建企业身份、权限、认证、审计4大体系,使用户在登录系统的过程中只需进行一次登陆操作,后台自动进行多重、更深入的认证,解决了传统认证模式中所有业务系统、资源认证方式一刀切的弊端,转而根据资源的重要程度进行灵活的认证策略配置,保证了重要资源的认证强度,有效保证了数据访问安全并简化了登陆程序。

     

    Abstract: This paper is aimed at the contradiction between the security and convenience of data access security and convenience in the enterprise information system. The 4A subsystem of the enhanced function with multiple authentication is designed and implemented in this paper for the role of user authority control. By the the construction of corporate identity, authority, certification, audit 4 system, the user in a log process only need one step and system automaticly carry on authentication operation. It uses smart strategy to autoconfigure the system, guarantee the authentication strengeh of resources, effectively ensure the data access security and simplify the loging procedure.

     

/

返回文章
返回