The Security Foundation Of Enterprise Portal

As the important place that they must go through ,enterprise portal provides the needed information and services for the employee, customers and partners, and transfers the needed data timely, then realizes the direct communication between information from internal and external.The security foundation of enterprise portal—authentication, authorization, personalization and single sign on, needs the support of the enterprise users storehouse, but the traditional storage method of relational database can't meet the performance requirement of the enterprise portal. It needs the support of one enterprise identity management with high performance. The core of directory services is a tree-like information directory. Directory services organize the data resources, data treatment resources and users information according the ordered structure, and it has been optimized pointing at the use of a large number of search. Directory services improve greatly the performance of reading and searching data. And it can meet the need of the enterprise portal.Current identity management system includes four parts: the directory storing the personal data and etc; a management system that can be used to add, modify and delete the data; the security system that verifies the visit identity; the audit system that assures the enterprise confirms to the privacy law. Among them, the former two parts are the foundation of the identity management system, which are called the enterprise identity directory and enterprise identity directory management system. The enterprise identity directory management system is the application based on the enterprise identity directory.The dissertation is divided into six parts:The first chapter mainly introduces the basic conception of enterprise portal, presents the necessary to implement the enterprise portals and the relationship between directory services and enterprise portal.In the second part, the directory service is the core. It describes a few of security mechanisms of the enterprise portal that related with directory services. at the same time, it introduces the development of directory services technology, the light weight directory services access protocol(LDAP), the production of directory services and the application of directory services in storing information, authentication andauthority.The third part is the key point of this dissertation, it mainly tells about the means and rules of planning and designing of directory services system, at the same time, these methods and rules are applied into enterprise identity directory. According to the requirement of the enterprise, the enterprise identity directory tree> the attribute type and syntax> the objects are all designed in this part, in the meantime, the method and strategy to improve the performance of enterprise identity directory is mentioned too.The following part designs and develops one enterprise identity management system based on the identity directory, and can deal with the usual management of identity directory better, including the functions such as adding and deleting as well as the authentication and management in grades. This system can meet the management requirement of the enterprise.The fifth part integrates the enterprise portal and the enterprise identity directory based on LDAP. Some examples are present, including the application of the enterprise directory in the authentication > authorization -. personalization and single sign on of the enterprise portal. In the end, this part analyses the result.At the end of the dissertation, it summarizes the whole research work, andadvances the future research work.