【正文】 分類號(hào) TP 學(xué)號(hào) 2020812100243 學(xué)校代碼 10487 密級(jí) 無 碩士學(xué)位論文 在線考試 統(tǒng)一身份認(rèn)證系統(tǒng) 的設(shè)計(jì)與實(shí)現(xiàn) 學(xué)位申請(qǐng)人 ： 張 沖 學(xué)科專業(yè) ： 計(jì)算機(jī)技術(shù) 指導(dǎo)教師 ： 馬光志 答辯日期 : 2020 年 11 月 Design and Implementation of Uniform Identity Authentication System Based on Campus Network A Dissertation Submitted for the Degree of Master Candidate ： Zhang Chong Major ： Computer Technology supervisor ： Ma Guangzhi Huazhong University of Science and Technology Wuhan 430074, October, 2020 I 摘 要 隨著高等院校中校園網(wǎng)應(yīng)用的逐漸普及，各種應(yīng)用系統(tǒng)逐漸增多，校園網(wǎng)應(yīng)用系統(tǒng)在提供更高層次服務(wù)同時(shí)，對(duì)于用戶身份認(rèn)證，用戶服務(wù)權(quán)限的要求相應(yīng)的提高，原來每個(gè)服務(wù)系統(tǒng)各自為政的身份認(rèn)證方式難以達(dá)到這個(gè)要求。這就需要建立一個(gè)獨(dú)立的，高安全性和高可靠性的身份認(rèn)證及權(quán)限管理系統(tǒng)。 為了解決高等院校各種應(yīng)用系統(tǒng)用戶管理 過程中的分散管理的共性問題，論文提出了統(tǒng)一、集中管理用戶訪問權(quán)限的認(rèn)證方案。 論文系統(tǒng) 采用 LDAP 目錄存儲(chǔ)和 Web Services 調(diào)用 的技術(shù)，建立了 用戶 信息統(tǒng)一存儲(chǔ)、調(diào)用接口程序、用 戶自助管理 3 個(gè)模塊。將高校中用戶登錄系統(tǒng)的基本驗(yàn)證信息統(tǒng)一存儲(chǔ)，統(tǒng)一管理，并建立簡(jiǎn)單、便捷的調(diào)用機(jī)制，實(shí)現(xiàn)數(shù)字化校園用戶身份認(rèn)證的統(tǒng)一管理和維護(hù)。 在 用戶信息統(tǒng)一存儲(chǔ)模塊 ，采用基于 LDAP 協(xié)議的 Sun Directory Server 目錄統(tǒng)一存儲(chǔ)用戶基本認(rèn)證信息，將用戶注冊(cè)信息寫入目錄中存儲(chǔ)，完成對(duì)用戶注冊(cè)信息的存儲(chǔ)，達(dá)到了讀取速度快，系統(tǒng)安全性能高，維護(hù)簡(jiǎn)便的 特 點(diǎn)。 在 調(diào)用接口程序模塊 ，引用 Web Services 服務(wù)調(diào)用自定義接口類庫(kù)實(shí)現(xiàn)對(duì)目錄的間接訪問。應(yīng)用系統(tǒng)只需通過 WEB 引用 Web Services 服務(wù)，調(diào)用接口類庫(kù)實(shí)現(xiàn)對(duì)目錄直接操作，以此實(shí)現(xiàn)應(yīng)用系統(tǒng)對(duì)目錄的間接訪問操作，實(shí)現(xiàn)了調(diào)用簡(jiǎn)單、安全穩(wěn)定、管理維護(hù)方便。 在用戶自助管理模塊，采用 .Net 技術(shù)，實(shí)現(xiàn)基于 Web 的 B/S 自助管理模式，用戶根據(jù)自己的證件號(hào)、身份證號(hào)及姓名，完成在系統(tǒng)中的注冊(cè)、修改等功能，簡(jiǎn)化了管理維護(hù)工作。 論文系統(tǒng)在實(shí)際應(yīng)用過程中，很好的解決了多應(yīng)用系統(tǒng)各自管理用戶的問題，方便了使用，簡(jiǎn)化了管理，提高了安全性和穩(wěn)定性 。 論文從系統(tǒng)的開發(fā)流程、設(shè)計(jì)構(gòu)架和核心技術(shù)詳細(xì)介紹了系統(tǒng)的設(shè)計(jì) 和開發(fā)。 關(guān)鍵詞 ： 輕量級(jí)目錄訪問協(xié)議 ， 分布式 ，校 園網(wǎng)， 用戶管理 II Abstract With the campus work applications increasingly popular among the institutions of higher learning, a variety of application systems increasing, application systems in the campus work to provide a higher level of service at the same time, for user authentication, user privileges service the requirements of the corresponding increase in each of the original service. Their own system of authentication methods difficult to meet this requirement This requires the establishment of an independent, high security and reliability of the identity and rights management system. In order to solve a variety of institutions of higher learning management system users in the process of decentralization of mon problems, the dissertation put forward a unified, centralized management of user access to the certification program. This system adopts LDAP directory system to store and called the Web Services technology, established of a unified storage of user information, called the interface program, user selfservice management module. Colleges and universities will be in the user login system to verify the basic unity of information storage, management, and to establish simple and convenient mechanism for calling, digital campus user authentication management and maintenance. Unified storage of user information module, based on the LDAP protocol Sun Directory Server unified directory to store the basic user authentication information, the user registration information into the directory store, plete the user registration information storage, to read the speed and security Highperformance, easy maintenance features. The procedure call interface program module, quote Web Services called custom interface class library for the realization of the indirect access directory. Application systems only through the WEB to quote Web Services, called the interface class library for the realization of direct operate the directory in order to achieve the application of indirect access to the operation of directory,achieved called simply, security and stability, management and maintenance easily. The user selfservice management module using. Net technology, achieved the Webbased B/S selfmanagement mode, the user according to their own papers, identity card number and name, pleted the function of registration, modification, and so on, simplified the work of management and maintenance. In the practical application of the system, primely solved a number of problems of each application systems in user management, facilitated the use of simplified management, increased security and stability. This paper detailedly introduces the design and development of the system39。s development process, design and architecture,and the core technology. Keywords: Ldap,Web Services, Campus Network, User Management III 目 錄 1 緒 言 .................................................................................................. 1 課題背景 ........................................................................................ 1 課題研究的目的和意義 ................................................................ 1 國(guó)內(nèi)外研究概況 ............................................................................ 1 主要研究?jī)?nèi)容 ................................................................................ 2 2 系統(tǒng)設(shè)計(jì)方案 的研究 ......................................................................... 3 系統(tǒng)的特點(diǎn)與性能要求 ................................................................ 3 系統(tǒng)的體系結(jié)構(gòu) ............................................................................ 4 系統(tǒng)實(shí)現(xiàn)流程 ................................................................................ 5 運(yùn)行環(huán)境 ........................................................................................ 6 3 系統(tǒng)的設(shè)計(jì) ........................................................................................... 7 認(rèn)證信息存儲(chǔ)模塊 ......................................................................... 7 目錄結(jié)構(gòu)規(guī)劃 ......................................................................... 7 Sun One Directory Server 目錄存儲(chǔ) ........................................ 9 調(diào)用接口程序 ............................................................................... 15 訪問目錄接口類庫(kù) ..............................