The Study And Design Of A Single Sign-on System For Banking System

In banking systems,many systems can not easily link with single sign-on system owning to the stability and safety of the systems.Banking systems are characterized by 7*24-hour service,tellers and operators may log on the system at any time.Traditional single sign-on system simplified the operation of the systems,but it can not fulfill certain code,which refer to user audition,user management and password management,in ISO27001.The continuity and continuity of the banking system is the primary goal of the banking information system.The traditional single sign on platform has a strong security,ease of use and management,but for emergencies,especially when single sign on platform can not be used to take effective measures,there is no effective emergency plan.In this paper,we improve the single sign-on system to meet the needs of banking business,including setting up effective warning system and emergency plan,and also fulfill the requirement of certain audition.In this paper,we first introduce the basic structure of the single sign-on system,and design the basic framework of the bank's single sign-on system.Secondly,according to the special requirements of the banking business,the function improvement is carried out.The password management requirements for the ISO27001 system are designed,which includes the generation of batchrandom password,the life cycle of the account password,as well as the user password management.For the special emergency response of the bank,this paper makes a plan for the emergency plan,and designs the mechanism of the separation and recovery of the password,which does not affect the management of the application of the single sign on the access bank,and satisfies the relevant regulations of the ISO27001.In this paper,the requirements for the high availability of bank single sign on platform are designed,through the number of users online,combined with historical data,to determine the operating status of the system,to achieve rapid detection,rapid positioning,rapid disposal of the three fast corresponding process.At last,the paper puts forward the prospect of the single sign-on bank system,and analyzes the management of the large banks and the single sign-on platform.