Design And Implementation Of Treasury Management System Based On 4A Management Platform

During the development of the Business&Operation Support System,the supported applications and the number of the users increase constantly.Since the network size expands rapidly,the security problems of the information become prominently,and a higher demand is needed to the system's conformity.Through making the account management,authentication management,authorization management and security audit into a centralized,unified security service system,4A management platform can offer safety services for the enterprises.By this way,the safety and the management ability of support system has been improved.However,due to the lack of effective supervision of internal personnel behavior,4A management platform has a risk of abuse of high privilege accounts.In order to make up the lack of 4A management platform in this link,the treasury management system takes a means of multiple check and balance ways to supervise and control the use of high authority accounts.It is learned from the bank vault management that there will be always two men in the warehouse from the door open to closed.In the process of implementation,the system makes full use of the 4A management platform of the existing accounts and equipments centralized management.The SSH framework technology,LDAP and PostgreSQL database are adopted in the development process.Through the investigation and analysis of the business processes of the B company,five different application scenes are designed reasonably for the treasury management system as the account based trigger mode and the operation based trigger mode.So that the internal personnel behavior can be managed by the process of "trigger-apply-authorize".Therefore,the scenes trigger module and the authorization approval module are designed into the system.The scenes trigger module is used to realize the automatic trigger of scenes.It means that when the operator's behavior is in line with a scene trigger condition,the scene will be automatically triggered to limit the behavior of the operator until he gets the appropriate authorization.And in order to keep the normal work efficiency,different ways to authorize for each scene are supported by authorization approval module.At the same time,scenes management module,sensitive data management module and policy management module are designed to build and modify the scenes rapidly,because the scenes are always changing with the business.In detail,the sensitive data management module and the policy management module are designed to support the scene management module.In the process of design and implementation of the system,the author participated in all of the works,and completed the works such as the outline design,the design of relational database,the detailed design and coding of the five function modules,and system test etc..When the system is implemented,all modules run normally and perform well.It basically meets the relevant requirements.With the gradual operation of the treasury management system,the amount of query of sensitive data is significantly reduced,which can effectively curb the abuse of authority and reduce the risk of customer sensitive information leakage.