The Authentication Sub-system's Designing And Implementation, Based On China Mobile 4A Specification

With the China Mobile's Business Operation Supporting System's rapid development and the increasing of the number of mobile phone users and supporting application systems, the management network has expanded rapidly, and information security issues are becoming increasingly prominent, and for that, we should put the integration between the systems to a higher level. One of the important bases of system integration is the unity of account data, the concentration of authority, the Single Sign On and authentication, and the security audit. With the technical specifications based on China Mobile's 4A,4A management platform is a security service system, which integrates the account management, authentication management, authorization management and security audit of business support system into a centralized, unified level.4A certification center in this paper is an important core part of the 4A system.It is the door of 4A system, users can access to resource system through it after a variety of security authentication.The main work of this paper is designing the 4A subsystem totally, and designing in detail the main account login module, the self service module of main account, the account authorization module, and the resources single sign-on module, and implement them.This sub-system discussed here meets the business support system the needs of authenticating and Single Sign On (SSO) various resources systems with the supporting of 4A management platform. It has some reference value in building enterprise information system.