基于PKI的铁路门户单点登录系统的实现

摘要

针对目前铁路部门业务管理效率低下，现有信息资源得不到充分利用，信息系统缺乏统一的身份安全认证等问题，本文设计了一种适合的单点登录系统和个性化门户。采用PKI、CA、LDAP等技术为用户提供了统一的信息资源认证访问入口，建立了统一的、基于角色的和个性化的信息访问集成平台，用户只需一次登录就可以根据相关的访问权限和策略设置规则去访问不同的应用系统，单点登录系统的设计加强了各业务子系统的交互性、整体性和数据的互通共享，解决了企业的信息孤岛问题，为用户提供了快捷有效的信息服务和专家决策支持。%In view of the low management efficiency of the railway sector ,not making full use existing resources,the lack of uniifed authentication security for management system and so on, this paper designed a suitable single sign-on system and personalized portal.Use PKI, CA and LDAP to provide users with a unified information resource access,to establish a unified, role-based personalized information access and integration platform.Then the users need to login at a time to access different application systems according to the relevant rules of access permissions and Settings.The design of Single sign-on system improves interactivity, integrity of business subsystem and interoperability of data,solve the problem of the enterprise information islands,provides users with fast and effective information services and expert decision support.