【作者】 殷君茹；

【导师】 唐小明；

【作者基本信息】 北京林业大学 ， 地图学与地理信息系统， 2011， 硕士

【摘要】 森林是我国自然资源的重要组成部分,在给人类带来经济效益和社会效益的同时,也给人类带来了巨大的生态效益。但随着我国经济的高速发展,环境的恶化却日益加剧,而森林资源也未能充分发挥其综合效益。为了经济和森林的可持续发展,有必要对森林资源进行有效地管理。本文在总结了国内外林业及相关行业信息系统的用户管理研究现状的基础上,根据我国国情,提出了建立省级森林资源管理服务平台的必要性,而后进一步分析了森林资源管理服务平台的用户特点和服务要素特点,将统一用户管理引入森林资源管理服务平台,构建一体化用户模型,将用户信息和权限信息等统一存放在LDAP数据库中,对用户信息和权限信息进行统一管理；对访问森林资源服务平台的用户按行政区域和组织机构进行角色定义,采用基于RBAC的访问控制,并对该服务平台的各种服务要素进行从粗粒度到细粒度的访问控制；对用户进行基于单点登录的统一身份认证,实现了用户一次登录,即可访问用户权限的所有服务；提供对用户信息、角色信息和系统授权的后台配置管理功能,完成对用户的静态授权,以适应用户和权限信息的不断变化；并与PKI/CA进行集成,提高了服务平台的安全性。最后,统一用户管理在辽宁省森林资源管理服务平台中的森林资源数据管理维护系统中得到实现和应用。更多还原

【Abstract】 Forests are an important part of our natural resources. They bring about economic and social benefits for humanity, while give human beings tremendous ecological benefits. But with China’s rapid economic development, environmental degradation is increasing, and forest resources are not fully played in terms of its comprehensive benefits. For economic and sustainable development of forests, it is necessary to effectively manage forest resources.On the current research situation of service platform and user management of forestry and related industries at home and abroad based, also based on our national conditions, this paper proposes the necessity of establishing provincial management service platform of forest resources. Then it further analyzes the feature of forest resources service platform user resources provided by forest resources service platform of the service elements, puts universal user management into forest resources services platform, and also user’s information and permissions information is stored in the LDAP database, then manage them on the unity platform; Forest resources service platform for accessing the user according to administrative divisions and organizations structure for role definition, the use of RBAC-based access control, and access control from the various services of the service platform elements from coarse-grained to fine-grained; Meanwhile the user based on a unified single sign-on authentication, it makes SSO (single sign-on) authentication, and which can access all the service only need one-time login. Provide information to users, roles, background information and system configuration management license; complete the authorization of the user’s static and permissions to suit the user’s and access information frequency changes; It is integrated with PKI/CA to enhance the security of the service platform.Finally, the Universal User Management platform has been realized and applied in the forest resource data management system of service platform in forest resources service system of Liaoning Province.更多还原