文档介绍：摘要
目前伴随着信息技术迅猛发展,B/S应用系统由于易开发、维护和用户使用方便等特点,得到了广泛的应用和推广。无论在教育、企业、金融还是其它领域,都需要很多应用系统来协同合作,这些系统在给用户带来方便的同时,也带来一些问题。由于这些应用系统使用的技术不尽相同,但每个应用系统都有自己的身份认证模块,用户要使用这些系统就必须要输入与应用系统相应的用户名、密码,通过这种方式达到登录多个应用系统的目的,但这样既不方便用户使用应用系统,又不方便对系统的管理,所以单点登录技术就应运而生。单点登录技术能为构建应用系统集成平台实现“一次登录,多处漫游”的功能。即用户通过统一身份认证系统认证后,就可以访问联盟下的其它系统,而不用重新登录。
单点登录解决了用户多次登录的烦恼、简化系统管理、保障了用户信息的安全。通过对现有的单点登录系统研究发现用户在各个系统之间的角色是不同的,所以在单点登录过程中,我们需要解决用户在不同系统间的角色转换问题。因此本论文基于改进的RBAC模型,并采用静态策略和动态策略相结合的方法来解决用户在各个系统间的角色转换。
本文首先介绍了单点登录的相关理论与技术,包括单点登录原理、信息安全、目录服务、RBAC模型相关基础知识。其次介绍了CAS和改进的RBAC模型技术。以上两部分是本论文的技术基础。再次介绍本系统的详细设计。在统一身份认证中,对认证流程、及相关电子身份证明进行了详细的设计;在角色转换模块中,提出了基于静态策略和动态策略相结合的方法。最后实现单点登录系统并完成用户在系统间角色转换功能。
关键词:单点登录 CAS RBAC模型角色转换
Abstract
With the rapid development of information technology, B/S application system, which is easy to develop, to maintain, and conveniently use, has been widely used and promoted. Many application systems are needed to work cooperatively no matter in the area of education, business, finance or any other areas. These systems bring convenience as well as problems to users. Single sign-on e into being because of different technologies in using of different application systems. Though differences exist, each application has its own authentication module. If users want to use these systems, they must input the appropriate user’s name and password as the application system, which is helpful for people to reach the purpose of logging in more than one application systems. But this approach is neither convenient for users to use nor convenient to manage the system. Single sign-on technology can achieve a function of "a single login, multiple roaming" for building applications integration platform. That is to say, users can visit other systems under the Union instead of re-login through a unified identity of authentication system.
Single sign-on can do good to solve the user’s trouble of re-logged ,to simplify the management of systems, and to protect the security of user’s information. We