The Telecommunications Comprehensive Statistical Analysis Of Platform-based User Management And Authentication System And Realization

Because of the increasing scale of networks, network information increases gradually. There are many application systems in some large-scale organization. These application systems developed at different time and used in different background, so their corresponding platform and technical framework were different too. Consequently, each application system only manage its own set of user resources which can only use in it's application system, can't be shared with other application systems. Moreover, the users must carry on the status authentication for different authorized service, which is tedious and has certain safe hidden trouble. Therefore, we need a unified, perfection, safe, easy to manage, portability and scalable user management and authorization system urgently.By extensive research of the current user identity management technology, we find that the use of directory services can manage the user resources and solve part of the problems that encountered when use relational database. A most prominent advantage of the directory services is its platform independency.This dissertation mainly focuses on the theories of role-based access control and lightweight directory access protocol. Based on the theory of RBAC and LDAP, we design and implement a user management model based on LDAP and RBAC. Using LDAP directory services technology can achieve the reunification of the user authentication and solve data redundancy issues that encountered when using relational database to manage those data. By using user management model can improve the efficiency of managing user information and increase the flexibility of enterprise changes. Simultaneously, we unify the RBAC thought to carry on the user authorization, which can reduce the authorization management complexity, and support enterprise's security policy with great flexibility.