单点登录系统下用户权限控制的设计和实现---毕业论文.docVIP

本 科 毕 业 论 文 摘　要 随着互联网的飞速发展，传统的基于用户名和密码的身份认证机制在不断增多的网络应用下已经表现出了明显不足，单点登录解决方案在这种情况下应运而生而。单点登录就是针对集中式的身份认证和授权管理提出的一个整合了不同系统的一个解决方案。 单点登录(Single Sign On),简称SSO，是目前比较流行的企业业务整合的解决方案之一，是指在多个应用系统中，用户只需要登录一次就可以访问所有相互信任的应用系统[1]。单点登录主要包括身份鉴别及用户授权两个方面。身份鉴别是指证实一个用户的身份是否有效的过程[2]，用户权限管理是指给这个用户一定的权限来访问系统资源。单点登录系统可以实现用户一次登录便能在所有应用系统之间自由穿行，而不需要进行多次身份认证，建立了一种更安全的登录方式，并且将多个系统独立的用户管理融合为统一的用户管理，简化了管理员的工作。单点登录系统的实施可以提高管理员的工作效率，提高用户体验，并且降低开发和管理的成本，因此在应用系统不断增多的情况下越来越流行。 本文将在单点登录系统中设计并实现一个合理的用户权限管理模块，将分散于各个应用系统的具有不同权限管理策略的用户管理集中到同一个模块中，进行集中式管理。 关键词：单点登录 权限控制 授权 Abstract With the rapid development of Internet, the traditional user name and password based authentication mechanism has shown its drawbacks under the fast growing of network applications . Single-Sign-on solution emerges to response to this request. Single sign-on is a solution to integrate different systems for the centralized identity management. Single-Sign-On, referred to as SSO, is one of currently popular enterprise business integration solutions, users need only log on once to access all the applications of trusted sytems .SSO mainly consists of two aspects, identification and authorisation. Identification means to verify whether the user’s identity is validate, and authorization means to give the user some right to get access to the resources of the systems. Single sign-on system allows the user a single login for all applications and can freely walk around without typing the username and password again and again. It establishes a more secure login, integrates multiple user management system into an independent user manegement service.The implementation of the SSO system can increase administrators’s efficiency ,improve the user experience and reduce the development and management costs . It becomes more and more popluar as the applications increase. This thesis will design and implement a reasonable centralized user rights management module in a Single sign-on system.It will bring together the scattered user manag