Cross-domain rights management system and method

Abstract

The invention discloses a cross-domain rights management system, comprising a front-end acting module, an identity authentication module, a rights confirmation module and a database; the front-end acting module is used for constructing data transmission channels between users and application systems, between application systems and the identity authentication module, and between the application systems and the rights confirmation module; the identity authentication module supports identity certificates awarded by multiple certification authorities to carry out identity authentication on usersaccessing in the application systems; the rights confirmation module is oriented to all the application systems of the whole cross-domain rights management system and is used for confirming the accessrights of users to the application systems and transmitting the confirmed access rights to the front-end acting module; the database is used for storing data related to users, multiple certificationauthorities and multiple application systems. In addition, the invention also discloses a cross-domain rights management method. The system and the method provided by the invention can realize rightsmanagement of cross trust domain and application domain, enables application systems therein to have enough adaptability and expansibility, and improves access efficiency for users simultaneously.

Description

technical field [0001] The present invention relates to information security technology, in particular to a cross-domain user authority management system and a related method. Background technique [0002] With the rapid development of society and economy, computer networks are playing an increasingly important role. For example, various companies and government agencies have gradually established multi-application and multi-service IT architectures. Generally speaking, various applications and service systems currently in use are constructed by different developers using different technologies at different times, such as: mail system, government internal office system, document management system, call system, GIS system, etc. . In these application systems, due to the differences in system infrastructure, coding methods, and application resource types, most application systems use self-contained identity authentication, user management, and authorization management systems...

AI Technical Summary

Problems solved by technology

However, in practical applications, both of these two methods have the following disadvantages: that is, it is difficult to implement and difficult to manage, and the popular application containers do not provide support, etc., which greatly increases the difficulty of system development

Images