The Design And Implementation Of A Unified Identity Authentication Subsystem Of Online Securities Trading System

With the rapid development of information technology and securities market, online securities trading business has gradually become an important part of modern securities transactions, and it also has become one of the most convenient transaction modes of securities companies. And the information security issues is the fundamental problem, which is related to the benefit of investors and securities companies, so we must take actions to solve it.This paper introduces the current situation of domestic and foreign securities trading system and identity authentication and analysis of existing security measures, then finally propose a more secure way, which is based on the double-factor authentication. Based on the requirement analysis of safety certification, this paper researches into relative technologies and designs of online securities trading unified authentication system, and implement the online securities trading system of unified authentication subsystem. The system mainly provides users with five kinds of double-factor authentication methods, communication password authentication, hardware binding identity authentication, message password authentication, dynamic password authentication and digital certificate authentication, meanwhile, it provides identity authentication management platform for users, the platform is used to manage and keep user information.This paper mainly describes the design and implementation of centralized authentication service module, identity authentication service module, IP information displaying module, communication interface module, dynamic password lock module, service module and authentication management platform. Centralized authentication service mainly distributes the requests to subsystem and distributes the different authentication requests to the different modules for processing. Identity authentication service module is mainly to get data information from the database and to do corresponding business processing, it is the main business processing module of the subsystem. The two modules are the main parts of the system, which provide the logic function and the business function, combine with other function modules to complete the requirements of the function system. IP information display module is mainly to record the last login information of the users. The communication interface module is to connect the third party message service, and to do some message operations, like massage generating, sending and receiving. The dynamic password module mainly provides dynamic password with binding, unbinding, check and synchronization. The lock service module is mainly applied to user, who is locked out due to too many bad password attempts. Identity authentication management service platform provides a unified management for user identity information platform for the securities business departments, it helps to handle the relevant business for user.This paper takes windows as development platform, using C++language as the main development language, and carrying out project management by using mature software engineering project management mode.The system adopts the client/server (C/S) structure, through the Lua script language processing logic and business logic, separating the service function from the system, to make the business function configurable and extensible.And to separate the server process by using middleware technology, it helps to reduce the coupling between the end of the service procedures and enhance the maintainability and portability of the program. Using dynamic script language makes functional logic and business logic can be dynamic updated, the application does not need to compile/restart frequently, the program just needs to reload the script, it will improve the efficiency of design, and also will reduce the maintenance cost of the system.The system has been successfully tested, it can work normally and steadily and its performance and function meet the expected military needs. The system has been put into use between Orient Securities Company Limited and Industrial Securities,it works well, so the other brokers will be in the next deployment.