摘要
针对多个业务系统的单一登录和统一认证授权的需求,提出了一种包含用户组和资源组的基于角色的访问控制策略,并利用Acegi构建安全系统和JASIG-CAS实现中央认证服务,设计实现了一个统一的认证授权系统。该认证授权系统对多个业务系统的用户的权限信息进行统一管理,实现了单一登录,并利用缓存机制,减少了在系统认证鉴权过程中对数据库的频繁访问,从而显著的改善了系统的性能。
In accordance with the requirement of SSO and uniform authentication and authorization of multiple business systems, a rolebased access control policy with user group and resource group is put forward, and a uniform authentication and authorization system is designed with Acegi to build security system and JASIG-CAS to act as central authentic service. The system manages user access information centrally for multiple business systems and realizes the function of Single Sign-on and takes advantage of caching mechanism to reduce interaction with the database to significantly improve the performance of the system.
出处
《计算机工程与设计》
CSCD
北大核心
2009年第8期1826-1828,共3页
Computer Engineering and Design
基金
信息产业部电子信息产业发展基金项目(2005635)
关键词
认证
授权
单一登录
基于角色的访问控制
缓存机制
authentication
authorization
single sign-on
role-based access control
caching mechanism
