Research And Realization Of Uniform Identity Authentication System Based On JAAS

Along with the portal rapid development, the application system which the user needs to use more and more, but each application system often has an own set of users authentication and the authorized method, in order to carries on the unification to the user the authentication to manage, therefore has the necessity to concentrate the different system each authentication method to a frame in, also is needs to have to be independent, the high security and the reliable status authentication and the jurisdiction management system, completes to the entire portal user's status authentication and jurisdiction management. Therefore establishes a unified status authentication management system, to each application system user realization unified authentication, the unification management and the unification authorization also becomes in the portal information security system construction the important link.To solve the problems discussed above, this paper puts forward a universal uniform identity authentication system based on JAAS model with JAAS, LDAP and SSO technologies, and implements the JAAS-SSO component by the model. Uses the frame which this article proposed to be possible the good solution to the status authentication and the access control unification management question. First of all, the system has realize the unified management of user's information, has guaranteed the integrality of the data, avoided the repeated development of each application system at the same time. Secondly, the system has realized the Single Sign On based on the number of applications, which will facilitate the user to use this system, improved the efficiency of using. Moreover, the system uses distributed LDAP directory tree structure to memory authentication information of users and applications for effective organization and management, which provide highly efficient and safe in accessing information.In short the uniform identity authentication system based on JAAS is a more common user authentication model. Several innovations are the following: First, Using JAVA programming language, the uniform identity authentication module packaged in Web services for the client to provide a unified interface. the platform have many merit such as common, cross-platform, extensible, Pluggable and Security Authentication etc.Second, Based on JAAS framework, the system adopt SSO model that improved, make the original dispersed users come together to execute unify management, accomplishes automatically logging on, improve using efficiency.Third, this strategy make use of the catalogues information tree structure of the LDAP distribute type, carry on the valid organization and managements to an information of the customer body and system control information, can provide the efficiently safe catalogue interview.The design of the system has been practiced and applied on the subject of Hebei science and technology foundation condition network platform, and Running well.