摘要
针对某国有大型企业信息服务平台中传统访问控制方式存在的缺陷,提出了单点登录的概念。在对单点登录模型进行深入分析的基础上,提出了一种J2EE平台上通用的单点登录的解决方案。该方案不仅可保证认证信息的安全性,而且便于其各个系统的无缝连接,能够较好地满足企业信息服务平台上各个系统的单点登录需求。最后以协同OA系统和e-HR系统间跳转情况为例论证了该模型的实现过程。
In order to solve the shortcomings of traditional access control method in Baosteel Information Service Platform,the paper presents the conception of single sign-on（SSO）.Firstly,it deeply analyse the SSO model,then brings up a solution on J2EE platform.The solution can not only ensure the safety of information authentication but also provide seamless connection with all systems.It can well satisfy the demand of SSO.Lastly,the authentication procedure is demonstrated by the example of jumping between OA system and e-HR system.
出处
《信息技术与标准化》
2012年第3期61-64,共4页
Information Technology & Standardization
基金
上海宝信软件股份有限公司科研项目"宝钢e-HR系统"
项目编号:ABS08226
关键词
单点登录模型
票据
认证服务器
公钥
私钥
SSO model
ticket
authentication server
public key
private key
