高校统一身份认证中的账号安全研究

Research on the Account Security of Unified Identity Authentication in Colleges

随着高校信息化建设的不断发展,统一身份认证平台逐步完善,实现了校内应用系统间的用户统一认证和信息共享,但由于认证账号易受到恶意攻击或使用不当,导致了诸多的安全隐患。论文针对目前统一身份认证中存在的账号安全问题,提出一个有效的认证安全管控与审计方案,从而提高统一身份认证系统的安全性,降低用户信息泄露的安全风险。

With the continuous development of information construction in colleges,the unified identity authentication platform was improved gradually.It has realized unified user authentication and information sharing between the campus application systems.Due to the authentication account is vulnerable to malicious and improper use,a series of potential security issues were occurred.Aiming at the account security issues of unified identity authentication,we put forward an effective authentication security program to control and audit user accounts so as to improve the safety of the unified identity authentication system and reduce the risk of information leakage.