企业级的级联身份认证架构及应用设计

Design of Eenterprise-level Cascaded Authentication Architecture and Its Application

随着企业信息化建设的不断深入,企业对信息化系统的应用需求也逐步深入。在各个应用的部署模式上,有的应用是在总部实现统一部署,有的应用是总部与子级分公司实现多级部署的模式并存。而在各子级分公司中,用户会涉及同时访问多套信息化应用进行办公,在此种情况下如何实现用户无差异访问统一部署应用与本地应用,并确保用户身份认证的可靠性和安全性,是企业信息化应用实现单点认证一个必须解决的问题。该文结合在国网公司的实践经验,提出一套企业级的级联身份认证架构及应用设计方案,方案在确保总部与网省公司的身份认证的可靠性和安全性基础上,同时实现网省公司可以无差异访问统一部署业务应用与本地应用。

With the continuous deepening of enterprise informatization construction,the application requirements of enterprises for the informatization system are also gradually deepening.In the deployment mode of each application,some applications are deployed uniformly at headquarters,and some applications coexist in the multi-level deployment mode of headquarters and subsidiaries.In each subsidiary,users will be involved in accessing multiple sets of information applications for office work at the same time,and in this case,how to realize users'undifferentiated access to unified deployment applications and local applications and ensure the reliability and security of user identity authentication is a problem that must be solved for enterprise information applications to achieve single sign-on authentication.Based on the practical experience in State Grid Corporation of China,this paper proposes a design scheme of a set of enterprise-level cascaded identity authentication architecture and application.On the basis of ensuring the reliability and security of the identity authentication of headquarters and provincial companies,the scheme also enables provincial companies to achieve the undifferentiated access to uniformly deployed business applications and local applications.