The Research And Implementation Of Uniform Authentication And Authorization Based On PMI

With the development of information technology, network security is more and more be taken seriously, and authorizations management as a field of PKI to get fast developmentDigital certificates strong authentication, confidentiality of information provided by PKI can no longer meet the needs of the development of information technology, to provide complex information environments authorization management to become a new research goals.Based on PKI, PMI as an infrastructure can be combined with a digital certificate system and directory service seamless, effectively to authenticate the user authorization, is an effective complement of PKI.For licensing issues, this paper presents a unified authentication and authorization solutions based on PMI theoretical.Unified authentication and authorization platform is an application platform, which provides unified user management services, unified authentication management services, unified license management services and single sign-on services.Based on LDAP, PKI, PMI and other security protocols, the platform can provide a unified information system for authentication and rights management, achieve a unified authentication and authorization, through digital certificates and attribute certificate authentication and authorization mechanisms, monitor the entire process of authentication and authorization audit, standardized framework for information technology security infrastructure.Based on PKI theory, this paper designed a certificate authentication for enterprise-class systems, and describes the core module.Based on PKI/PMI framework, this paper puts forward the solution to the authorization management system, and describes in detail the principle of its mechanism and the working process.Platform provides a unified user management, digital certificate services, rights management services and single sign-on service that provides support for the government, financial and corporate information safe and rational use of resources. The system can be widely used in accessing control WEB resources and network resources, the system is committed to providing convenient and flexible environment for secure authentication and authorization applications,especially suitable for systems with many users with different privileges and levels of access control.The system can provide a comprehensive license management solutions for our e-government, e-commerce and other industrial users, application developers and so on.