基于LDAP的企业级统一用户身份管理系统的设计与实现  

Design And Realization of Enterprise Unified User Identity Management System Based On Lightweight Directory Access Protocol

作　　者：朱少敏[1] 刘建明[2] 魏晓菁[2] 

机构地区：[1]中国电力科学研究院,北京100085 [2]国电信息中心,北京100761

出　　处：《核电子学与探测技术》2008年第3期662-666,共5页Nuclear Electronics & Detection Technology

摘　　要：为了解决企业用户身份信息孤岛,实现信息资源无缝整合和共享,企业级统一用户身份管理系统已成为信息化企业基础平台的重要组成部分。结合企业信息基础平台需求,剖析了企业级用户身份管理组成要素,以基于LDAP协议的统一目录服务为基础,设计了元数据模型和目录树结构,实现了用户身份信息的高效管理和统一认证,对单点登陆、应用系统集成等性能进行了测试,构建了统一、安全、可扩展的企业级用户身份管理系统。In order to solve isolated islands of enterprise user idemity information and achieve seamless integration and sharing resources, enterprise unified user identity management system was becoming one of important information basic platforms in information enterprises. By analyzing enterprise information basic platform demands and enterprise user identity management components, metadata model and directory tree were designed, the high efficiency management and unified authentication of user identity information were realized, single-sign-on and integrating application systems were tested. An unified.safe and extensible enterprise user identity management system was designed based on uniform directory services using lightweight directory access protocol.

关 键 词：统一用户身份管理 轻量级目录访问协议 目录服务 统一认证 单点登陆 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论]