校园网统一身份认证系统.docVIP

摘 要 身份认证是网络安全技术的一个重要方面，在各高校的各种应用系统中身份认证技术都得到了很好的应用。但是，随着高校中各种应用系统使用越来越多，随之而来的问题是：在校园应用系统中有太多的密码需要记忆；住在院外的老师因没有合法的身份而无法浏览和使用院内的一些重要应用系统；教职工和学生的与身份相关的详细信息在各个应用系统中不一致；添加新的应用系统时没有一致的认证和授权框架可以使用等等。 建立数字校园系统是解决上述问题也是近年来各高校校园网应用建设的一个新的方向，它涉及数据集成、单点登录、授权管理等多方面的内容，而统一身份认证方案是首先需要解决的问题，其中包括单点登录和授权管理。 本文介绍了在进行数字校园信息系统的建设过程中，采用LDAP作用户信息存储，实现了基于LDAP服务的统一认证服务。系统的各个层次相对独立，保证了系统的松散耦合，同时，系统易于集成，新的应用系统可以不带自己的用户系统，依靠统一认证系统实现对用户的认证和授权，降低了开发难度。系统采用JAVA编程，说明了各主要模块的实现方法和步骤。随着统一身份认证系统的逐步完善，将在信息安全体系中发挥重要的作用。 Identity authentieation is a very important factor on network security technology,which be used on different application systems by a lot of universities.However,with the more using of application systems,the more problem be appeared.We have to remember lots of passwords. Some teaehers living out of campus do not browse and login some useful web page because they have not a legitimate identity. The basic information about teaehers and students haves a great deal of variance in different application systems. There have not Unified Authentication and Authorized Architecture when you append a new application. Digital campus system is set up to resolve the problems above and it is also a new direction that leads the application of the campus network construction in recent years. It involves data integration, single sign-on, authorization management, etc. What is first to be resolved is the program of uniform identity authentication, including single sign-on and authorization management. This article introduced the Digital Campus construction, we choose LDAP to save the users information about the Digital Campus System, at the mean time realize the Unify Identity Authentication Service base on LDAP. The system relatively independent, which guarantees the loose coupling of the system.In additional, the system can be integrated easily.So,new application system need not rely on its own authentication system but unified authentication to complete the authentication and authorization of users,