4a, Enterprise-class Security Management Platform Design And Implementation

During the development of the BOSS system, the supported applications and the number of the users increased constantly. Since the network size expanded rapidly, the security problems of the information became prominently, a higher demand is needed to the system's conformity. The important basis of the system conformity is the account number data unification, centralized authorization, the single sign on the authentication, and the safe audit. Original account number, jurisdiction, authentication, audit aspect security measure has not been able to satisfy the request of the supports for today and the future .This topic is one of the most important projects which focus on security of the China Mobile Sichuan company in 2006. The BOSS system is a large-scale integrated application system contains computer, networking, database and application software .As one of the provincial company of China Mobile, Sichuan company has the characteristics such as the large area of the networks, the huge numbers of users and the entire and complex systems. The most important task is that using the present information technology to move the integral development strategy for Sichuan. Along with rapidly development of the enterprise support system, information security questions become prominently and a higher request of the conformity between systems will be needed. The construction of the 4A management platform which can make sure the user legitimately, safe and the convenient use service to support system's specific resources has the important meanings and practicality.Following the questions above, in this thesis the account number management, authentication management, authorized management and security audit of the security service system will be analyzed. It can established enterprise support system which called 4A security management platform. Through the secure service system of the 4A management platform, the new application will be easier to centralize into the platform. For the centralized management of each kinds of the IT resources and the 4A safety service of each kinds of the system, the safety and the management ability has been improved. The main results are as follows:1. It introduced the overall portal frame construction of the 4A management platform and simply described the platform management, the platform function level and the platform connection level function structure.2. According to the overall portal frame construction of the 4A platform, it described the account number management, the authentication management, the authorized management, the audit management, the platform and the platform connection management functional design in detail.3. According to the overall technology frame, it elaborated the technology which the 4A manages platform utilizes and the application layer, connection level, non-functionality specification.4. The authentication and the authorization part of the 4A manage platform will be described in detail.