反向级联认证在一级部署业务系统中的应用

Application of Reverse Cascade Authentication Technology in Centralized Deployment Business System

为解决一级部署业务系统各级用户的平滑访问,引入了反向级联认证技术。反向级联认证是在充分考虑信息安全原则的前提下,利用总部和网省两级身份认证系统,实现网省用户访问总部一级部署业务系统的身份认证方式。反向级联认证在一级部署业务系统中的成功应用,为其他业务系统进行一级部署改造进行了有益的探索、积累了经验,也充分证明了一部分业务系统率先进行一级部署改造是切实可行的,在一定程度上避免了投资风险,具有良好的示范效果。

In order to realize the smooth access to the centralized deployment business system for all level users, the reversed cascade authentication technology is introduced. This technology is an identity authentication method to allow the provincial users to access the centralized headquarter deployment business system using both headquarter and provincial level authentication systems. It sufficiently satisfies the information security principles. The successful application of the reverse cascade authentication technology in the centralized deployment system lays a path and accumulates experiences for centralized deployment reformation of other business systems. It proves the practicability of starting centralized deployment reform for some business systems at first. It avoids investment risks to a certain extent, and has good demonstration effect.