基于LDAP和PKI的Intranet统一身份认证系统研究

Study of intranet single user authentication system nased on LDAP and PKI technology

Internet/Intranet的引入为企业实现信息化,提供了一个快捷、高效、方便的网络环境,但网络信息安全中的用户身份认证问题是必须解决的关键问题之一。通过对当前Intranet身份认证系统存在的安全性问题分析,首先探讨基于PKI和LDAP技术的身份认证的模型,提出了一种可靠的、高效的Intranet统一身份认证方案,重点论述了其认证过程和数字证书的存储备份问题。该方案在某个大型企业网具体实现,效果良好,在当前具有广泛的应用前景。

The Internet/Intranet emergence provided for the business enterprise a fast, efficient, convenient network environment so as to realize informatization, and one of the key security problems of network information system is user authentication. Based on analysis the security problems of existed user authentication system, the model of user authentication system based on PKI and LDAP technology is discussed, and a new reliable efficient scheme is proposed, the process ofauthentication and storage ofdigital certificate. Thescheme is realized in an enterprise network and has a good effect. The system will have wide application.