Unitary authentication authorization management system and method

Abstract

The system includes a common authentication authorization server, multiple application servers in different service types, multiple computers at client ends, an information base for authentication and authorization and a database. Functions fulfilled by the system are as following: providing unitary interface of authentication and authorization services; carrying out concentrative registration and authentication for users; carrying out access control management for application service based on access authorization. The invention integrates user's authentication and authorization for multiple application system.

Description

【Technical field】 [0001] The invention relates to an authentication and authorization technology, in particular to an authentication and authorization technology for multiple application systems. 【Background technique】 [0002] The existing web service login solution is a login scheme achieved by using each web application server to save user information during a session and the client supports cookies, wherein a cookie is a kind of information transmitted by a web server to a browser. [0003] When a user browses any of the web servers for the first time in the same browser, he needs to enter a set of user names and passwords stored in the system, which leads to two obvious problems: [0004] 1. When an enterprise has multiple application systems, since each system requires an independent set of user name and password data, the system engineer must maintain multiple sets of user name and password (including modifying user name / password and logging into the system) ). [0...

AI Technical Summary

Problems solved by technology

[0004] 1. When an enterprise has multiple application systems, since each system requires an independent set of user name and password data, the system engineer must maintain multiple sets of user name and password (including modifying user name / password and logging into the system) )

[0005] 2. Since the session information between different web application services cannot be shared, the user must repeatedly enter the user name and password when using the same browser to log in to a website for the first time; regardless of whether the user name and password are the same or the Whether the username and password are in the same database

[0008] Although the security of the above-mentioned patent has been improved, its single sign-on server only plays an encryption role in essence, and it still cannot solve the problem of unified authentication and authorization among multiple application service systems, and the function of single sign-on

[0009] In view of the deficiencies of previous technologies, it is urgent to solve the problem of unified authentication and authorization single sign-on for multiple application service systems

Images