【作者】 徐俊；

【导师】 黄传华；

【作者基本信息】 南昌大学 ， 计算机应用， 2008， 硕士

【摘要】 随着数字化校园建设的逐步完善和发展,各种基于校园网的应用系统层出不穷。各种应用系统独立认证的弊端也逐渐突显出来,校园网络难以集中管理,用户访问不方便,安全性存在极大隐患。因此,建立一个统一身份认证系统对数字化校园实现统一管理、统一认证和统一授权是十分必要的。现有的应用系统开发模式及结构存在很大差异,在应用集成上存在很多不足。随着Web Services技术的发展和广泛应用,其高效集成性、松散耦合性和实现简单等特点使得互操作和集成问题从层次上被简化。本文采用大量广受欢迎的开源软件,提出一种基于Web Services的统一身份认证系统架构,由统一身份认证平台、LDAP数据库以及Web Services集成引擎三部分组成。其中统一身份认证平台通过CAS结合acegi来实现单点登录以及认证和授权。整个系统中,认证和授权工作全部依靠统一身份认证平台中的CAS,这样降低了各应用系统的维护和管理成本,同时提高了安全性和可扩展性,降低了开发难度。利用Xfire进行Web Services开发,系统的各个层次相对独立,这样既保证了系统的松散耦合,也使应用系统的集成和扩展新应用系统更容易。随着统一身份认证系统的逐步完善,将在数字校园信息安全体系中发挥重要作用,使得网络更安全,更方便管理和使用。更多还原

【Abstract】 With gradual construction of e-campus being perfect, various kinds of application emerge on the campus network system.The drawbacks of each kind of application system with independent authentication also gradually appears, so the campus network is hard to be centralized management, the visit of user is not convenient, and the security exists enormous hidden danger. Therefore, to establish a Unified Identity Authentication System(UIAS) to the digitized campus that realize unified management, unified authentication and unified authorization is extremely essential.The development pattern and the structure of existing application system are very different, they has very many insufficiencies in the application integration. With the technology development of Web Services, its characteristic that contain highly effective integration, the loose coupling and easy realization and so on cause that mutually to operate and the integrated question is simplified from the level.This article uses massive popular open-source softwares, and proposes one kind of UIAS frame that based on Web Services,it contains three parts, the platform of unified identity authentication, the database of LDAP as well as Web Services integration engine. the platform of unified authentication identity including the CAS server. Through unifying acegi and CAS the authentication and authorization can be realized. In the overall system, the authentication and authorization completely depends on CAS. This can reduce the maintenance and management cost of each application system, enhance the security and extension, and reduce the difficulty of development. Developing Web Services with Xfire can make each level of the system be relative independence.This can guarantee the loose and coupling of system, also cause the integration and extence of application system be easier. With the gradually consummation of UIAS system, it will play vital role in the information security system of e-campus, and will make the network safer, management and use more convenient.更多还原