Research And Implementation Of Single Sign-on System In Social Insurance Integration Services

With the development of information technology and the constant improvement of China's social insurance, social security branch attempts to initiate cooperation with enterprises and institutions in some fields, such as banks, medical centers and employment centers. Through linking the web services, gateways and integrated application programs, social security departments and enterprises can realize information resource sharing. However, if the user wants to access to these independent systems, he or she needs to make identity authentication in each system. It brings great inconvenience to the administrators and users, and it is also inefficient. Therefore, it becomes the key point of research to find an authentication method of crossing—domain server, which only needs authentication once while visiting different systems.At first, the thesis analyzes current situation and development trend of the social insurance information services and single sign-on technology, from which the research content and significance about this subject are educed. Secondly, a detail analysis is made for the requirements of system and the current main solutions to single sign-on system. Moreover, it presents the reasons that SAML-based standards are selected as solution. Then the thesis analyzes and studies several key problems on establishing single sign-on system, and also provides corresponding solutions. Subsequently, this thesis proposes the framework of Single Sign-on System on the basis of SAML and the systematic structure of SAML services, and gives a detailed design of this system and thus achieves the implementation. Finally, it arrives at evaluation of the systems, and summative expectations of its exploitation and research.The system this thesis discussed mainly has following features: firstly, it provides "plug-in" framework of identity federation and identity authentication, which reduces the difficulties of deployment and implementation; secondly, it supports many kinds of information transmission modes, thus raises the information transmission efficiency; thirdly, it possesses perfect security protection system; fourthly, it is easy to expand because of the loosely coupled relations among layers; Last but not the least, combining with such open source projects as opensaml, openws, xmltooling and etc., it enhances the exploitation efficiency and strengthens the stability and reliability of this system. In a word, the flexible framework of the system makes it not only to serve for social security branch but also to work as the general solution to single sign-on technology.