Research And Implementation Of Access And Authorization Of E-Government Based On PMI

E-government is an integrative information system based on network technique. It is related to national security and government's jobs, and its information is related to national policy and regulations, so its security is very important. For the sake of sharing information in the e-government systems and ensuring e-government's security, related technologies which includes identity authentication, authorizations and access control are studied, and then, a security platform providing identity authentication, authorization and access control is designed and implemented.This paper firstly introduces some network information security techniques, including Public Key Infrastructures (PKI), Privileges Management Infrastructures (PMI), and Access Control technology. Then, an access control model based on PMI is built, which combines PMI and RBAC. Secondly, this model is applied to e-government applications. According to this model, an e-government security platform which mainly provides identity authentication, authorizations and access control is designed and implemented.This paper mainly introduced the solving scheme of this platform, and then in depth describes the subsystems in this platform. After SSO System and PMI System are introduced briefly, this paper discusses the design and implementation of the UUM subsystem in detail. According to the organizations, users, system resources, roles and so on in the e-government platform, the scheme of access control policy is provided. And then, the storing structure in the LDAP is described in detail. At last, the paper makes final report to this platform , points out some shortcomings and the direction of improvement.