The Study And Implementation Of CAMS Synthesis Self-Service System Based On Dotnet

CAMS (Comprehensive Access Management Server) is the product of HUAWEI-3COM Inc. CAMS support the terminal users' demands of authentication, charge account and power management to realize the administrable and runnable network, and to ensure the safety of network and users' information. The original self-service platform in CAMS is far from satisfying the requirements of the users, because of the simple functions, not personalization interface and the lack of online payment function.The basic facilities of campus network in Southwest Jiaotong University are perfect and mature comparatively. And the popularization and use of the campus smart card in this campus is one of the important conditions to realize online payment. It is not only providing convenience for numerous teachers and students, but also is the portion of digitization campus, is a good complementarity and perfect for public service and community service in digitization campus and a concrete practice of campus electronic commerce that using campus foundation network, computer hardware and software to satisfy the demands of the branch, corporation and individual users in school area, and to establish the CAMS integrate self-service system with high applicability, good flexibility and security, and pertinence.The CAMS integrate self-service system adopt three software overhead constructions system to strengthen the usability, security, extensibility and transplantability of the system. Data Store Layer (DSL) uses the Oracle database of CAMS. Business Logic Layer (BLL) use Web Service technology to shield the distinctness of the two different system, CAMS system and campus smart card system. Graphical User Interfaces use ASP.NET 2.0 technology to develop unified and powerful web interfaces.CAMS integrate self-service system select Secure Socket Layer (SSL) protocol to reduce safety threatener when online paying; adopt Advanced Encrypt Standard (AES) arithmetic to be the primary message encrypt arithmetic; ensure only permitting the campus net users to use this system by config IP address and domain name limit; combine Role-Based Access Control (RBAC) and Access Control List (ACL) to ensure the security of system access control; and design the rolling mechanism and the maximum payment sum limit mechanism to enhance the security and fault tolerance of the system account management.