Design And Implementation Of Enterprise Information Security Management And Control Platform

Nowadays, information technology is rapidly applied to them the various aspects of theproduction, a variety of support systems and applications, has become the production of ITcompanies operating platform. Followed by information security issues have become moreprominent, mainly in the following aspects:(1) the user basic information management is toofragmented;(2) User passwords and other sensitive information stored in plain text and transfereasily be theft and misappropriation;(3) weak password security risks, reduce the security of thesystem;(5) between systems, the lack of global audit and access control, illegal access can not beaccurately positioning;(6) within each security The lack of coordination between the linkage system,resulting in safety management gaps and loopholes.For the information security issues need to be resolved, according to the complexity ofenterprise business systems integration difficulty, the characteristics of a large difference inmanagement style between departments, this project provides a set of security for enterprise-levelusers, convenient, and efficient management system and security support platform, set safetycertification of the safety management and control platform, centralized account management,centralized authorization management, centralized auditing and single-point sign-on service in atargeted solve enterprise security management loopholes to circumvent the security risk. And designa flexible product features and configuration to adapt to the different needs of enterprises of differentindustries.Based on this topic in the user information on the application system synchronization; strongauthentication technologies; rights management and authorization model; audit and report analysistechniques; single sign-on protocols and programs; technologies such as data encryption anddecryption algorithm to conduct in-depth research, according to the software engineeringdevelopment process, the use of UML modeling, requirements analysis, outline design, detaileddesign, software implementation and testing, the final release to use.The platform has been used in the financial, telecommunications, insurance and other industries,has become the core of enterprise security management platform, has played an important role forenterprise security management.