Enterprise-class Applications, Centralized Access Management System

Access & administrative system is the first strategic and important step for logging in the security system. Firstly, User should present its identity when he accesses a security system (e.g. mail, database and so on), then he can continue to do next step of visiting and controlling. It is meaningful to realize the system which centralized, manages a great deal of different ID authentications and sign-on systems, especially to modern corporations and governments, which is easy for user to use and control, and can improve the system security level in some degree.On the basis of analysis of advantages and shortcomings of applied Single sign-on system models that are popular in home and foreign countries, this article advance a kind of Single sing-on system model that is more appropriate to different kinds of cooperation. A innovation of this model that can use many kinds of current and popular maturity identity authentication production through the API that defined by the GSS-API criterion, and offer a good compatibility and expansibility for accessing the different kinds of cooperation .Another innovation is that the author enlarge the definition of PSE constituted by Co. SAP. It can combine closely the user' s identity authentication information with the user' s accessing authority information. It also can use the user authentication management of the LDAP server to adopt user's accessing authority by classification. And can use the secure communications way, such as SNC and SSL to resolve the data communications safely question of the SSO client and the SSO server , as well as the SSO client and the enterprises application server .Let the users of multi-enterprise application can land various kinds of licensed application systems expediently .safely and rapidly. This system have a good security, arrangement, expansibility and dependability.