The Security Related Certification Based On Education Electronic Identity

Single Sign-On,a trend and development needs for application systems integration resources for enterprises and institutions.After the first authentication,you can access to all the trusted application systems,to achieve the consistency of user information in systems,and can improve the productivity of users,enhance the user experience of application systems.In this paper,we design and implementation a system based on the security related certification of Education Electronic Identity for the application needs of multi-application system integration,including the following:(1)Design and implementation of related certification.A user-centered single sign-on model is constructed through custom application proxy service for application systems.The user Education Electronic Identity is activated.At the same time,the unified user database is created.Then,the Education Electronic Identity associated with the user system of the original application is implemented by application proxy service.The unified management and identity authentication of user information,access to real-name system and a single sign-on access are achieved via Education Electronic Identity,without changing the original user information system.(2)Transfer and validation of credential.The core services individually packaged,complete the security transfer and validation of credential,by interact between the application system and custum application proxy service,to achieve cross-domain single sign-on,reducing the coupling and improve availability of the system.(3)Security of service and data.To improve the use of the security system of core services,we use the model of authorized for application services,and therefore,the security of data protection is greatly improved by application services and data separation deployment.System function testing showed that the account activation,authentication and other modules are run in accordance with the established design intent to meet the system requirements;the results of performance testing show that,the system is stable while running in 1800 concurrent users,in the case of 1000 concurrent users,90% of the system response time less than 35 millisecond and performance efficiency,achieve the purpose of system design.