SAML Based Intelligent Logging-on System In Electric Enterprise Integration Services

With the fast development of electric enterprise's informatization, there are more and more data interchange and collaboration between different application systems. Insuring a secure alete integration between those systems becomes an important issue, which have an crucial effect on steady going and high performance of electric enterprises, and it is very important to ensure the validity of access entity. On the basis of electric enterprise's integration service, and in consideration of the requirement on interoperability and security in the architecture of the next generation EMS/MMS, which is brought forward in the international super electrical network function annual meeting, emphasis is placed on the issue of the intelligent logging-on system. Based on module and Service-Oriented Architecture, by using new information technologies, such as security assertion markup language(SAML), extensible markup language(XML), simple object access protocol(SOAP), WS-Security etc, this paper describes the design of an intelligent logging-on system, which is centralized in the identity authentication management and distributed in the access authorization management, according to the modified pattern. The philosophy of design is that, using the SAML tokens to carry with the identity assertion of legitimate users, and transferring the SAML token between those application systems by SOAP protocol and WS-Security technology. So that user can access to the resources authorized by application systems after logging on the unified interface, then achieve the intelligent logging-on goal. This paper advanced an integral structure of the system, analyzed the running flow, described the design and achievement of those modules in detail, and then advanced a general security mechanism according to security problems that the system faced to. Development platform is BEA WebLogic Server, this Java server has an advantage in modularization and extended capability, the components in it support SAML token. Through the analysis of an instance, this model is demonstrated to meet the requirements of future power system on integration and reuse. Then a discuss has been had on the further optimization of the intelligent logging-on system.