Shengli Oilfield Unified Authentication Management System

With the continuous development of the oilfield business systems, the assets of the types of applications the drastic increase in the number of independent certification of the application system, not only brought a doubling of the workload to the system operation and maintenance personnel, and the application system using their own named users of the system in accordance with their respective management process management, have their own authentication mechanisms and authentication entry has its own naming convention, system management belongs to system resources based system user to assign access rights, the lack of uniform access control platform, as the number of users increase, rights management is increasingly complex, system security is difficult to be fully protected. To this end a unified identity for all kinds of applications for unified management is also imperative. Unified identity management system combines existing account management services (LDAP directory services), information security safeguards for different accounts at the application level, to create a unified account management mechanism and platform, for different applications and users, and to provide a unified and consistent identity management and authentication services.Shengli Oilfield unified authentication management system as one of the basic security support platform for application systems to provide security infrastructure and public services, these services function can be roughly divided into audit, access control, identity, and notes (ticket), process control, program integrity Sexual five categories. Audit user activity and system activity records and review process, which is to improve the security of the system is an important step; access control security and protection measures for system access control and network access control; identity and notes primary administrative user life cycle management of multiple authentication mechanisms and the corresponding notes, manage keys; process control management identity lifecycle process related services; program integrity, encryption support, data protection, component protection, resource use and safety management.The Shengli Oilfield users unified identity management system is based on JDK6.0, Eclipse3.4, Oracle11g, apache-tomcat6.0, Power Designer15and other tools for the design and development, the use of the MVC, LDAP, single sign-on and other key technologies of the system design, object-oriented idea of00implementation, easy system expansion and maintenance.