| The development of science and technology especially the computer technology, network and communication technology makes the cost of Enterprise Informatization down continually. More and more enterprises begin to make much account of the establishment of informatization. Without informatization, the enterprise's constant, standardized administraton and promotion of key competitiveness is nothingness.Because of inadequate fund and lack of excellent management, those small and medium-sized developing enterprises frequently can not give a over-all planning during their informatization establishment process. It leads to that the disposition environment and running environment of various information systems are different from each other. In this case, there are many modules which play the same role being established repeatedly. The same function modules have to be developed more than once due to the difference of their running circumstances. That's a really waste of resources and an unfavorable factors, especially to those small and medium-sized developing enterprises. The management of access control module plays a very important role in the information systems. But it is often built into each information system by multiplexing of business logic or code and database structure, leading to each information system has their own module of access control management. It's inconvenient for the centralized management of secure access and privilege control.Making rational use of resources to establish an access control system which is convenient for centralized management is necessary to an enterprise's informatization. According to the analysis of the access control modules in enterprises's information system, a solution turns up that using a access control architecture based on SOA can solve the problems of the repeating modules develop and waste of resources. In addition, using Web Services technology to implement the architecture based on SOA can provide Cross-Platform performance and the solution is loose coupled, easy to multiplexing and low cost.There're two primary and efficient platforms to implement the Web Services, J2EE and. NET. By comparing their characteristic feature in implementing Web Services and considering the specific requirement in project practice term,. NET framework was adopted to implement the architecture. It intergrated those modules which were distributed in each information system and using the Cross-Platform performance of Web Services to solve the problem of data exchange between the systems which hava different running circumstances. It's convenient to use one access control system to manage the access privilege for each system of the enterprise. |