Research Of Rights Management Based On Unified Authentication Applied On The Service Outsourcing Platform

With web application system promoting rapid in the enterprise, more and more enterprise platforms have several web sites, the management for the users certification of this enterprise platform has become an urgent problem. Although there are already some unified authentication and authorization research results, but many companies still take the program for a single system, and even using a unified authentication and authorization. there are some applicability, compatibility and expanding issues. Therefore, to meet the requirements of the unified authentication and authorization in service outsourcing platform for users, we study and realize the mechanism of rights management based on a unified authentication.First, the article describes unified authentication, rights management and single sign-on background knowledge, and proposes the advantages. And propose the application mechanism should be integrated the framework and mechanism of.NET.Secondly. describes the details of the technical and theirs development. And research a security model. consider of the safety, applicability, efficiency, etc. In this model, take use of.NET security mechanisms and membership services, with single sign-on, authentication and rights management technology combine to complete the unified authentication and authorization. Then, present the architecture overall design and system processes, and divide the system into single sign-on interface, user management module, authentication service modules and rights management module. Combine membership services with timestamp-based password authentication to authenticate Identity, and membership combination of RBAC mechanisms to achieve authorization management, use the single sign-on Pull model and.NET security mechanism to generate receive and process authentication and authorization messages between systems. Combine these modules to complete the unified authentication and authorization function for the platform users. Simplify the complexity of model and the development process. Ensure the system security as well as the applicability while optimizing the efficiency of the authentication and authorization. Finally, realize a uniform authentication, rights management mechanism in the service outsourcing platform. And give the future research direction that the system as a commercial product in the actual market promotion and development of functional.