基于ESB的统一身份认证系统设计与实现

Design and implementation of uniform identity authentication system based on enterprise service bus

异构的信息系统由于具有各自独立的身份认证和用户管理模块,存在着用户身份不一致、信息重复,应用系统无法整合、安全性差等问题。为此提出了一种基于统一的数据交换标准和接口标准,将不同的用户管理模块和认证模块进行集成的方法,设计了系统模型、交互流程和认证协议,实现了基于企业服务总线(ESB)的统一身份认证系统。实验结果表明,系统能有效地避免身份认证逻辑的重复和数据的冗余,提高认证的效率和系统资源的利用率。

The self-governed identity authentication and user management lead to different identity,redundant information,self-governed system and bad security in heterogeneous information systems.A new method of integration based on uniform data exchange standard and interface standard,especially the system model,data flow and authentication protocol were put forward.Furthermore,a uniform identity authentication system based on Enterprise Service Bus（ESB） was realized.The experimental results show that the system can avoid redundant authentication logic and data,and it also enhances authentication efficiency and makes the best use of the available resources.