《校园网统一身份认证系统的设计与实现论文》由会员分享，可在线阅读，更多相关《校园网统一身份认证系统的设计与实现论文（79页珍藏版）》请在金锄头文库上搜索。
1、 . . . 分类号TP3.56 学号 43学校代码10487 密级 无 硕士学位论文在线考试统一身份认证系统的设计与实现学位申请人： 冲学科专业：计算机技术指导教师：马光志答辩日期:2008年11月Design and Implementation of Uniform Identity Authentication System Based on Campus NetworkA Dissertation Submitted for the Degree of MasterCandidate：Zhang ChongMajor：Computer Technologysupervisor：Ma
2、GuangzhiHuazhongUniversity of Science and TechnologyWuhan 430074, P.R.ChinaOctober, 2008 / 摘 要随着高等院校中校园网应用的逐渐普与，各种应用系统逐渐增多，校园网应用系统在提供更高层次服务同时，对于用户身份认证，用户服务权限的要求相应的提高，原来每个服务系统各自为政的身份认证方式难以达到这个要求。这就需要建立一个独立的，高安全性和高可靠性的身份认证与权限管理系统。为了解决高等院校各种应用系统用户管理过程中的分散管理的共性问题，论文提出了统一、集中管理用户访问权限的认证方案。论文系统采用LDAP目录存储和W
3、eb Services调用的技术，建立了用户信息统一存储、调用接口程序、用户自助管理3个模块。将高校中用户登录系统的基本验证信息统一存储，统一管理，并建立简单、便捷的调用机制，实现数字化校园用户身份认证的统一管理和维护。在用户信息统一存储模块，采用基于LDAP协议的Sun Directory Server目录统一存储用户基本认证信息，将用户注册信息写入目录中存储，完成对用户注册信息的存储，达到了读取速度快，系统安全性能高，维护简便的特点。在调用接口程序模块，引用Web Services服务调用自定义接口类库实现对目录的间接访问。应用系统只需通过WEB引用Web Services服务，调用接口类
4、库实现对目录直接操作，以此实现应用系统对目录的间接访问操作，实现了调用简单、安全稳定、管理维护方便。在用户自助管理模块，采用.Net技术，实现基于Web的B/S自助管理模式，用户根据自己的证件号、号与，完成在系统中的注册、修改等功能，简化了管理维护工作。论文系统在实际应用过程中，很好的解决了多应用系统各自管理用户的问题，方便了使用，简化了管理，提高了安全性和稳定性。论文从系统的开发流程、设计构架和核心技术详细介绍了系统的设计和开发。关键词：轻量级目录访问协议，分布式，校园网，用户管理AbstractWith the campus network applications increasingl
5、y popular among the institutions of higher learning, a variety of application systems increasing, application systems in the campus network to provide a higher level of service at the same time, for user authentication, user privileges service the requirements of the corresponding increase in each o
6、f the original service. Their own system of authentication methods difficult to meet this requirement This requires the establishment of an independent, high security and reliability of the identity and rights management system. In order to solve a variety of institutions of higher learning manageme
7、nt system users in the process of decentralization of common problems, the dissertation put forward a unified, centralized management of user access to the certification program.This system adopts LDAP directory system to store and called the Web Services technology, established of a unified storage
8、 of user information, called the interface program, user self-service management module. Colleges and universities will be in the user login system to verify the basic unity of information storage, management, and to establish simple and convenient mechanism for calling, digital campus user authenti
9、cation management and maintenance.Unified storage of user information module, based on the LDAP protocol Sun Directory Server unified directory to store the basic user authentication information, the user registration information into the directory store, complete the user registration information s
10、torage, to read the speed and security High-performance, easy maintenance features.The procedure call interfaceprogram module, quote Web Services called custom interface class library for the realization of the indirect access directory. Application systems only through the WEB to quote Web Services
11、, called the interface class library for the realization of direct operate the directory in order to achieve the application of indirect access to the operation of directory,achieved called simply, security and stability, management and maintenance easily. The user self-service management module usi
12、ng. Net technology, achieved the Web-based B/S self-management mode, the user according to their own papers, identity card number and name, completed the function of registration, modification, and so on, simplified the work of management and maintenance. In the practical application of the system,
13、primely solved a number of problems of each application systems in user management, facilitated the use of simplified management, increased security and stability. This paper detailedly introduces the design and development of the systems development process, design and architecture,and the core tec
14、hnology.Keywords: Ldap,Web Services, Campus Network, User Management目 录1 绪言- 1 -1.1 课题背景- 1 -1.2 课题研究的目的和意义- 1 -1.3 国外研究概况- 1 -1.4 主要研究容- 2 -2 系统设计方案的研究- 3 -2.1 系统的特点与性能要求- 3 -2.2 系统的体系结构- 4 -2.3 系统实现流程- 5 -2.4 运行环境- 6 -3 系统的设计- 8 -3.1认证信息存储模块- 8 -3.1.1 目录结构规划- 8 -3.1.2 Sun One Directory Server目录存储-
15、 10 -3.2调用接口程序- 16 -3.2.1访问目录接口类库- 17 -3.2.2 Web Services调用类库访问目录- 21 -3.2.3 应用程序调用方法- 24 -3.2.4实现用户在应用系统中的注册- 25 -3.3 用户自助管理- 27 -3.3.1 用户注册验证- 27 -3.3.2 用户信息自助管理- 29 -3.3.3 管理员web用户管理模块- 30 -3.4 配置文件管理软件- 37 -4 系统的实现- 41 -4.1 Sun One Directory Server安装- 41 -4.2 统一身份认证平台架设- 49 -4.2.1 Userinf项目- 49 -4.2.2 Web Services服务- 52 -4.2.3用户信息WEB管理服务- 53 -4.3 应用系统调用- 54 -4.4 Sun One Administration Server管理- 60 -4.5 Web远程管理用户- 65 -5 总结与展望- 66 -5.1 总结- 66 -5.2 系统测试- 66 -5.3 展望评估- 69 -致- 70
