Research And Implementation Of Unified Identity Authentication And Authorization System In Digital Campus

Along with the continuous promotion and depth of the informatization degree of colleges and universities,the digital campus construction is more and more perfect,in which a variety of application systems based on campus network are surging.However,due to the limitations of the initial construction,every functional department itself is responsible for the construction of the application system in the network following no unified data standards,so that the system cannot achieve effective data sharing with gradually appeared "information island." Therefore,it is an important part of digital campus construction to establish a unified identity certification and authorization system for implementation of unified management,certification and authorization of network users.According to the extensive and in-depth research on the existing methods of identity certification and authentication at home and abroad,this paper points out the important position of the unified identity certification and authorization system as a software platform in digital campus construction.Also,it discusses key technologies used in unified identity certification and authorization.In addition,the status quo of application system construction in colleges and universities is analyzed in detail.According to the actual situation of colleges and universities,on the basis of the directory service,the LDAP standard protocol is adopted to organize the user and resource information distributed in each application system into a logical directory tree,which greatly simplifies communication between the certification and authorization server and the application system,and reduce the difficulty in the realization of the system.Based on the Kerberos authentication protocol from the trusted third party,the public key cryptosystem is used to improve,after which a design strategy combining LDAP protocol and Kerberos authentication technology is put forward in order to achieve the certification and authorization server design.The implementation of the unified identity certification and authorization system has realized the intelligentization of access control of network resources in of colleges and universities,which makes user operations convenient,makes network management simple and efficient,produces a information sharing effect of data center,equipment cluster and application integration,and provides theoretical support and technical reference for the construction of identity certification and authorization system in digital campus.