Design And Testing Of Mobile 4A Security System

4A security system (Acount, Authentication, Authorization, Audit i.e. account management, authorization management, authentication management, audit management) is China Mobile's security system.Users use 4A system to manage system resources including Host, Database and so and application resources including BOSS, BOMC,NGBASS and so. Users can manage users accounts' creating, authorization and auditing operations through 4A system, and login the systems above by login 4A system. As the impact of a wide range,4A systems must go through rigorous testing before it's release or upgrade.This article mainly discussed AIUAP1.0----the account, authentication, authorization and auditing platform of AsiaInfo company, which is a concrete implementation of 4A security system at AsiaInfo.This article first analyzes the requriements for mobile 4A security systems, and made the system design based on it, then did regression test of 4A system. In addition to the basic function testing, it focus on how to use the application of automated testing tools QTP for automated regression testing, and how to use load testing tool LoadRunner for load testing.Currently, AsiaInfo 4A security system has been successfully applied in China Mobile's Shanghai, Guangdong, Chengdu and other 10 provinces, which achieved good results. At present, our project group is doing the PhaseⅡrequriements analysis and design work, it will solve the practical application problems and lackage that encountered in the process of PhaseⅠ.