Open Platform Based On Multiple Security Level Certification

With the advent of the Internet era,openness has become the main theme of Internet technology.However,the traditional open platform often adopts a single authentication model for authentication,which makes the permission granularity too coarse and does not match the fine-grained resource management.In particular,the government open platform requires a new type of authentication model to solve this problem.In response to this problem,the thesis conducts an in-depth study on trust management and user behavior,and designs a government open platform with multiple security levels.In trust management,the open platform determines the user's initial security level through different authentication methods,and binds users from multiple dimensions such as mailbox,mobile device,identity document,and face verification,and the real name of the authentication method will determine the authentication.Security level.In terms of user behavior,the open platform dynamically monitors user behavior,determines whether the user is in an abnormal state according to the established security policy,and takes corresponding feedback measures for the user in an abnormal state,such as reducing the security level of the user.Only after the user completes the corresponding authentication can the corresponding security level be restored and the abnormal state is removed.In this design,the paper realizes a government open platform with multiple security levels.The implementation of the entire government open platform is implemented using the Spring Security framework.The corresponding webpage and mobile end are used to complete mailbox authentication,device binding verification,identity verification and face recognition verification,and implement a user behavior analysis module to dynamically adjust the user's security level.After verifying the implemented system,the authentication mode of the government open platform can be matched with fine-grained resource management,and the security level can be dynamically adjusted through user behavior,which has good usability.