Design Of Network Security Management And Control System Based On Microservice Architecture

With the rapid development of IT system in Heilongjiang Branch of China Mobile,the number of resources of various systems is increasing.Information security problems such as leakage of sensitive data,ultra vires and unauthorized operation are becoming more and more prominent.Higher requirements are put forward for the security integration and integration of IT systems.The current authentication system and user management functions can no longer meet the requirements of business systems.So it is necessary to establish a centralized and unified account management platform to solve the problem of security management.Based on the study of the basic concepts,common technologies and development trends of SSO(Single Sign On)single sign-on,unified identity management and access control at home and abroad,this paper analyses the current situation of business system and user and access control management in Heilongjiang Branch of China Mobile,and formulates the research objectives and contents.It focuses on the system requirements,business requirements,functional requirements and development trends.Non-functional requirements are analyzed in detail.Architecture design and key technologies of network security management and control system based on micro-service architecture are studied.System functions are determined to be managed from account,authentication,authorization and audit,including authentication micro-service subsystem(portal management,account management,authentication management,authority allocation and control,process management).Audit micro-service subsystem(audit information acquisition and management,Treasury management),emergency micro-service subsystem(emergency management),three subsystems and eight functional modules.on the basis of the above analysis and research,the construction of network security management and control system based on micro-service architecture is realized,and the implementation effects of system security,audit analysis and evaluation are detailed.Detailed elaboration verifies that the network security management and control system achieves information security,quantitative assessment,and plays a driving role in the security management of Heilongjiang Mobile.