Authentication And Authorization In Security System For Web Management Information System Based On ASP.NET

With the development of computer technology, especially the more and more mature network technology, the function of the Management Information System (MIS) is also becoming more important. And it has been widely used in many fields such as industry, agriculture and business etc.However, for any information system, robust and effective security management mechanism is the fundamental guarantee to the legally use of information. As a human resource information management system for enterprises, the SCD MIS (Siemens Corporate Directory Management Information System) stores the data and personal information of all the employees which can give the enterprise a heavy strike in case of being leaked. In this system, different data information allows different personal access and different people are interested in different data information, so the authentication and authorization of the users which directly affects whether the system is successful is an extremely important part of the system.This paper which studies and analyzes various advanced security technology and integrates the practical demand of the SCD MIS project for security requirement, designs a suit of security system based on ASP. NET Web MIS. Because of the limitation of length, this paper mainly explains the entire security system from authentication and authorization.The SCD MIS has been deployed successfully at the Siemens. It has achieved the security requirements of the client and is running well. For management information system which is based on the access mode of ASP.NET Web, the SCD MIS is worth referencing to a certainty.