亚洲18在线看污www麻豆_人人九九精_开心黄色网_国产高清视频一区_怡红院久久_日韩免费在线观看_红桃视频隐藏入口_免费在线观看av_另类天堂网_99热黄色_久久理论片_日韩精品电影在线观看_www.国产成人_九九热精品免费视频_亚洲在线综合

Solution of single login system for three-stage Golden Tax Project

This project establishes the application security supporting platform of the network, supporting unified management, unified ID authentication, single login and ID authentication and digital signature based on digital certification of network users and authority, ensuring the correction of system information.

The establishment of application security supporting platform for the special business network support the unified management of network users and authority, unified ID authentication, single login and ID authentication and digital signature based on digital certification.

Establish application security supporting platform for the external network to support ID authentication and digital signature based on digital certification.

1.1.1 總體架構

1.1.2Main functions

1）Unified user management service. Unified users management provides services of centralized user information management, user account maintenance, password strategy management, and authorization management for applications of many businesses, which ensures the synchronization of the only ID account information and the account information of multi-application system within the unified users management system. Unified users management is the foundation for the realization of user’s ID sharing, unified ID authentication and multi-applications’ single login. Unified users management can get internal users and external users’ basic information through the tax human resource system and comprehensive collection and management system.

2）Unified ID storage service. Unified ID storage uses LDAP and supports relational database pattern, which is the major data storage resource of tax users’ ID information. It provides users’ ID information storage, application users’ accounts, authentication methods and authorized information storage for the unified users’ management. It also offers unified synchronization of users’ information for all application systems, provides authentication data of authorized users and ID authentication for the unified ID authentication service. It also is responsible for the synchronization and maintenance of users’ ID information for all levels’ storage systems.

3）Unified ID authentication. Unified ID authentication provides unified user ID authentication service and approves data based on the users’ ID information in the unified ID storage. Unified ID authentication service supports multiple authentication patterns, which include static password, digital certificate, dynamic password and SMS, to meet the needs of multi-security. After passing the ID authentication, users can access authorized application systems through single login service, realizing the ID authentication sharing among different application systems.

4）Single login. Single login service solves the multi-identified issues when accessing the multiple application system. Single login provides the users the access of all application systems’ service within the right of authorization through one time of authentication, which supports the crossing area authentication between central department and province department (“roaming”). Single login should support the working doors of the central department’s business.

5）Digital authentication application service. Digital authentication application service is based on the public key infrastructure (PKI), which supports the digital certificates signed by the three stage golden tax project’s authentication system and other digital certificates signed by other authorities which fit the requirements of the nation and taxing, providing the services of digital signature authentication, digital certification’s ID authentication, data coding and decoding, secure accessing and coding of distribution channels for the application system.

1.1.3 Logical arrangement picture