Research And Development Of Unified Account And Identity Management System Facing To Enterprises

With the continuous advances in network and computer technology, the networkhas expanded rapidly, more and more network service application is accepted.In orderto support and carry out various operations,information systems in the enterprise inthe operation of the full penetration.But information isolation between each system,the user’s identity information is different, information sharing is not high, andmanage the data quantity and complicated.Along with information construction at thesame time,in network information transmission used in identity (or logo) encryptiontechnology(Identity Based Encryption，IBE) can realize the effective protection ofenterprise data.Identity in IBE encryption plays the role of the public key,so realizeeffective access and management of user identity is also one of the requirements ofenterprise management system.Through analyzing the demand of the enterprise information construction, thisarticle carries on the unified account and identity management system research anddesign, to centrally manage user identity information, the account informationapplication system as well as the identity, which largely simplifies the enterpriseinformation management.Papers on the requirement analysis of system development,system design and system implementation.Unified account and identity managementsystem is a based on MVC framework, using the Struts and Spring technicalimplementation of Web services system.System features a common user and usergroup management, the management group includes global management group,system management group, user management group, and user authorizationgroup.System for the average user to achieve the function:global accountregistration、 registration and management of the identifier、 binding and registeredfor the account of application system、modify personal information and passwords,etc.Ordinary users can choose different types of identifiers to register, identifier typeare not identical, activate the way also is different.System for the managing groups ofusers to achieve the function:the user identity information management、departmentof user management、 department management、 identifier of the configuration management、the role of information management、user groups of the department ofmanagement.This topic to implement the system to reduce the system maintenance andmanagement group of the user’s work burden, improve the efficiency of the enterpriseto the user management, effectively avoids the waste caused by repeateddevelopment.In full consideration of the needs of the enterprise and the data read andwrite speeds and future data expansion needs, combining the advantages of LDAPdirectory services using LDAP to manage user identities and permissionsinformation.The user’s permission information mainly includes the user roles and usergroup information.All the enterprise internal departments organization and roleinformation is stored in LDAP.Identifier and application system account informationis stored in a MySQL database.