Design And Implementation Of Xiaomi Passport System

With the development of internet corporation, user systems are increasingly,when a user visit security-sensitive function module, the system will authenticateuser’s identity. At present, this identity authentication mechanism is an effectivemeans to protect users’ privacy and system security; However, normally the identityauthentication mechanism for different systems will have great differences in design,such as the user name, password length, complexity etc.. Meanwhile, the user has adifferent account in different system, need to remember different password, it iseasy to forget or deliberately set into simple and easy to remember but unsafevalues, causing potential safety problems. Accordingly, with the identityauthentication mechanism independent of the system, the user requires multipleinput user name, password, causing a lot of inconvenience, And some plaintextpassword in the network transmission also pose a security risk. Therefore asimple-to-use passport system provides guarantee for the rapid development ofInternet corporation.Based on Xiaomi company’s "Xiaomi Cloud" project, we implement acomplete Xiaomi Passport System. The system implements the user loginauthorization, basic contact information, and partial personalized information’sstorage and query. The Web Module achieve functions of the user login registrationpage, information management page and so on; The Authentication andAuthorization Module implements functions of authentication and authorizationwhen other system access to; SDK provides a very convenient access to the passportsystem to certify identity and query information; The Information Push Moduleestablishes a system to the user’s information channel, which supports pushing text,images, command and other information.This paper discusses the system has been completed, with high efficiency, easeto use, compression capability and other features, it has been passed the test, andsuccessful on-line. At present, the system has more than tens of millions ofuser-level, stable and achieves pre-designed goals.