【作者】 任劼；

【导师】 李晖； 刘振霞；

【作者基本信息】 西安电子科技大学 ， 电子与通信工程， 2006， 硕士

【摘要】 用户管理一直是网络信息系统的关键。对访问企业信息系统的用户的管理是否有效,直接涉及到企业信息的安全性问题。所以,对访问用户的管理,一直备受企业关注。企业对访问应用系统的用户进行访问限制的时候,有许多技术可以应用,身份认证和访问控制就是其中两个必不可少的技术。单点登录是一种很重要的机制,通过单一的鉴别和认证动作,可以容许用户访问所有的计算机和应用系统,无须输入多个系统密码。单点登录降低了人为的错误,系统的主要故障。论文详细讨论了单点登录的机制与实现方法。本论文研究的内容是:企业信息管理平台下用户统一管理系统的开发以及基于角色的访问控制(RBAC)和单点登录(SSO)。论文的主要研究与开发工作是:1.叙述了身份管理与身份认证技术以及权限管理与访问控制技术的发展现状;2.对基于角色的访问控制(RBAC)进行了深入研究,在此基础上将基于角色的访问控制进行了扩展,提出了规则驱动的RBAC模型,并且给出了RBAC在企业信息管理平台中的应用模型;3.用企业信息管理平台下用户统一管理系统的开发做为例子,说明基于角色的用户管理涉及到的问题;4.在研究现有身份认证和单点登录技术的基础上,论文给出了在旅游信息管理平台中利用用户统一管理和Kerberos认证协议的机制实现单点登录的模型;5.给出了在企业信息管理平台下单点登录和访问控制的实现。更多还原

【Abstract】 User management always is the network information system key. The management to the user who enters the enterprise information system is whether effective involves the enterprise information safety factor directly. Therefore, these management has been regarded extraordinarily.Many technologies can be use to limit the accessing user , Authentication and the Access Control are two essential technologies.Single sign-on (SSO) is a very important way. Through single distinguish and authentication movement, can allow the user visit all the computers and application systems without inputting more system password. SSO reduces the artificial mistake and system major failure. The thesis discusses the method and realization about SSO.The research of this thesis is: Development of unified management to the users in enterprise information management system ,and Role-Based Access Control (RBAC)、Single Sign On (SSO).The mainly involved development and research are as follows:1. Narrates the status management and authentication technology as well as the present situation of the authority management and the access control technology development.2. Studies Role-Based Access Control in a deepgoing way. on the base of it, extended RBAC and brought out the model of Rule-driven RBAC,giving a realization of the RBAC in the Enterprise Information Management System.3. Take the development of unified management to the users in the enterprise information management system as an example, explaned the question which involves based on the RBAC.4. Based on the study of the authentication and SSO technology, the thesis gives the model of the SSO that brought about by unified management to the users and Kerberos in the Travel Information Management System.5. Shows the realization of the SSO Access Control in the Enterprise Information Management System.更多还原