云环境下校园网统一身份认证与授权策略研究

Research on Unified Identity Authentication and Authorization Strategy of Campus Network in Cloud Environment

云计算技术使数字化校园呈现出高可用性和高扩展性特征。为解决云环境下入网认证与教学系统的统一身份问题,设计了基于校园云平台的统一身份认证及授权模型。通过锐捷入网认证三方接口开发了统一身份接口、授权策略和安全审计等中间件,在松耦合模式下与教学系统认证集成,解决了统一身份认证与系统授权问题;为访问日志库和审计规制提供了行为安全判定。

Cloud computing brings high availability and high scalability to digital campus. In order to solve the problem of network authentication and teaching system in cloud environment, we designed a unified identity authentication and authorization model based on campus cloud platform. Through the three parties authentication Ruijie interface, the unified identity interface, authorization and security audit Middleware are developed, it is integrated with teaching system certification integration in loose coupling mode,and the unified identity authentication and system authorization strategy are solved. The access log database and audit rules provide the behavior security determination, which is helpful to the following study of the unified user identity in public network.