Unified Identity Authentication Research Articles

Research and Practice on High Availability Scheme of Unified Identity Authentication System Based on CAS in Colleges and Universities

Unified identity authentication has become the basic information service provided by colleges and universities for teachers and students. Security, stability, high concurrency and easy maintenance are our requirements for a unified identity authentication system. Based on the practical work experience of China University of Geosciences (Beijing), this paper proposes a high availability scheme of unified identity authentication system based on CAS, which is composed of multiple CAS Servers, Nginx for load balancing, and Redis as a cache database. The scheme has been practiced in China University of Geosciences (Beijing), and the application effect is good, which has practical reference significance for other universities.

Research and Implementation of High Available Digital Campus Unified Identity Authentication System Based on LDAP

Research and Implementation of High Available Digital Campus Unified Identity Authentication System Based on LDAP

Unified identity authentication scheme of system wide information management based on SAML-PKI-LDAP

Unified identity authentication scheme of system wide information management based on SAML-PKI-LDAP

Editable and Verifiable Anonymous Authentication Incorporating Blockchain in the Internet of Energy

With the continuous development of the Internet of Energy, the access of a large number of distributed renewable energy has caused difficulties in energy management. The traditional energy management mode cannot meet the needs of existing energy management and trading. Therefore, this paper proposes an integrated energy management platform based on blockchain, which allows multiple decentralized energy management systems to conduct unified identity authentication. At the same time, an editable and verifiable anonymous authentication (EVAA) scheme integrating blockchain in the Internet of Energy is designed, which combines the idea of chameleon hash (CH) and the algorithm of elliptic curve encryption (ECC) to realize the dual identity authentication of user information. Finally, the generated certificate is stored in the chain through blockchain consensus. The scheme is mainly constructed using multiple secure cryptographic algorithms, which combine the advantages of blockchain for information authentication. Thus, it can accomplish user cross-system authentication and transaction, and achieve more secure editable anonymous identity authentication through the algorithm performance test, compared with the existing similar schemes under the unified test standard. This paper not only ensures the operation efficiency, but also reflects the obvious advantage of realizing higher intensity security performance.

Unified Identity Authentication Scheme of System Wide Information Management Based on SAML-PKI-LDAP

Unified Identity Authentication Scheme of System Wide Information Management Based on SAML-PKI-LDAP

Blockchain-Enhanced Data Sharing With Traceable and Direct Revocation in IIoT

The industrial Internet of Things (IIoT) supports recent developments in data management and information services, as well as services for smart factories. Nowadays, many mature IIoT cloud platforms are available to serve smart factories. However, due to the semicredibility nature of the IIoT cloud platforms, how to achieve secure storage, access control, information update and deletion for smart factory data, as well as the tracking and revocation of malicious users has become an urgent problem. To solve these problems, in this article, a blockchain-enhanced security access control scheme that supports traceability and revocability has been proposed in IIoT for smart factories. The blockchain first performs unified identity authentication, and stores all public keys, user attribute sets, and revocation list. The system administrator then generates system parameters and issues private keys to users. The domain administrator is responsible for formulating domain security and privacy-protection policies, and performing encryption operations. If the attributes meet the access policies and the user's ID is not in the revocation list, they can obtain the intermediate decryption parameters from the edge/cloud servers. Malicious users can be tracked and revoked during all stages if needed, which ensures the system security under the Decisional Bilinear Diffie-Hellman (DBDH) assumption and can resist multiple attacks. The evaluation has shown that the size of the public/private keys is smaller compared to other schemes, and the overhead time is less for public key generation, data encryption, and data decryption stages.

An efficient attribute-based encryption scheme based on SM9 encryption algorithm for dispatching and control cloud

Dispatching and Control Cloud (DCC) is a cloud platform constructed by State Grid Corporation with the technology of cloud computing. DCC has improved the overall operation and monitoring capabilities, the smart level and many other advantages of power grid. However, the development of DCC has been hampered by security and privacy issues. Secure unified identity authentication, access control and authorisation management are significant topics in DCC. To find out a solution for the topics above, we have employed some encryption schemes using the attribute-based encryption(ABE), as ABE can preserve users' privacy and achieve access control with fine grain over the encrypted information. SM9 is a kind of Chinese official standard in the field of cryptography, which contains the SM9 encryption algorithm (SM9-IBE). In this paper, an ABE scheme based on SM9-IBE is proposed, making SM9 support fine-grained access control which would be better applied in DCC. Our proposed scheme (SM9-ABE) has been proven to be of great security in the selective CPA model under DBDH assumption. Furthermore, we implement SM9-ABE and evaluate its practical performance. The implementation indicates our scheme performs well in the matter of security and functionality, at an additional time cost which is acceptable.

Cloud Education Chain and Education Quality Evaluation Based on Hybrid Quantum Neural Network Algorithm

This paper proposes the functional model and application service implementation process of the education cloud platform application service architecture. The entire cloud application service architecture mainly includes four parts: cloud service management, cloud application service rapid creation and deployment, dynamic process configuration, and unified identity authentication. Based on the basic theory of workflow, the process status and business services of cloud application services are discussed. The BP neural network weight optimization model based on the improved quantum evolution method is studied, and a method that combines the improved quantum evolution algorithm (IQEA) and the BP algorithm to complete the back propagation neural network training is proposed, that is, the IQEA‐BP algorithm. Firstly, the traditional quantum evolution algorithm is improved, and then, the improved quantum evolution algorithm is used to optimize the network weights as a whole to overcome the shortcomings of the BP algorithm that is easy to fall into the local optimum; then, we use the BP algorithm to find the better weight as the initial value to improve the training and prediction accuracy of the network. In order to enrich the school education quality evaluation system, this article adds soft indicators that can reflect school education performance on the basis of the existing “National Education Inspection Team” indicators and uses analytical methods to prove the effectiveness and feasibility of the new evaluation indicators. The X1‐X10 index data is selected as the evaluation index of the school education quality evaluation system in this paper. Testing the performance of the BP neural network, the accuracy rate of the school education quality evaluation is 93.3%, the average absolute error is 0.067, and the accuracy and recall rate of the test set grade gradient of 0, 1, 2, 3, 5, 6, and 8 are all 93%, indicating that the IQEA‐BP neural network algorithm has a good effect on the evaluation of school education quality.

Construction and Operation of Digital Campus System Platform in Guangxi Polytechnic of Construction

The digital campus is the advanced information technology on campus for all hardware and software resources were fully digitally. This article mainly aiming at existing question of our school digital campus to put forward a solution that builds a unified identity authentication platform which once you have logged in, you can switch to all platforms without password. And this paper focuses on the principles, contents and expected effects of our digital campus construction.

Research on the SSO Key Technology Based on Web

"Once logged in, full network roaming" is the primary purpose of single sign on, which allows users to log in from an entry and access all applications. This paper mainly introduces the SSO system related technical support, from the unified identity authentication technology, Cookie technology and Session authentication mechanism to several single sign on design model based on Web, also from the safety and feasibility analysis of the implementation process of SSO, solve user and administrator problems, improve the convenience of network the user's work efficiency and operation.

An Implementation Framework for Municipal “Internet + Government Service”

The way to promote Internet + government is to build an Internet-based e-government platform, which can overcome the encountered bottlenecks, such as heterogeneous system, data barriers and standards are not unified. In view of the above situation, the objective of this paper is to propose an implementation framework for municipal e-government platform to provide services in a model based on unified standards, unified access and scheduling, unified data sharing and unified identity authentication. The framework consists of user layer, application layer, support layer, resource layer and infrastructure layer. As a national Internet + government service demonstration project, the framework is being implemented in Foshan city.

Top-Level Design and Practical Applications of Wisdom Campus in Chinese University—A Case of Wisdom Beihang

Wisdom education is the direction of educational informatization development. Wisdom campus is the advanced stage of the development of educational informatization. The construction of wisdom campus is a complicated systematic project, requiring not only strengthening top-level design from the macro level, but also considering the specific operational implementation from the micro level. On the background and connotation of wisdom campus development, this paper reviews the domestic research literature, and analyses the top-level design of wisdom campus. The organization structure is the key; the business process is the main line; the institution standard system is the focus; the campus culture is the essence; the platform construction is the core; the public service is the target; the operation and maintenance is the support; the information security is the basis; the supervision and assessment is the guarantee. At the same time, combined with the practical application of wisdom campus construction of Beihang University, the One-card service, integrated services, One-stop service, wireless network, unified identity authentication, data center, and iHome comprehensive application platform provide a reference case for the top-level design and construction of wisdom campus.

Unified Identity Authentication between Heterogeneous Systems Based on LDAP and RBAC

To solve the problems of unified identity authentication between heterogeneous application systems that emerged in the procedure of informatization construction. The paper presents a 3-tier architecture solution that contains user tier, unified authentication tier and application system tier to realize unified identity authentication between legacy system and new application system. For legacy systems, the paper presents a method of double authentication that users firstly log on unified identity authentication system for unified identity validation, then securely transmit authenticated unified identity information and simulate the authentication progress via the authentication mechanism of legacy systems for permission distributing. For new application systems, the paper presents a method of centralized authentication through a relatively independent Role Based Access Control (RBAC) identity authentication model that consists of organization, user, role and permission entries to realize the logical separation of users and access permission, then designs a Directory Information Tree (DIT) structure based on the RBAC model for permissions distributing and access controlling

Integration of Network Resources Based on Unified Identity Authentication

This article analysis the current situation of the virtual construction in university, which information non-sharing, poor safety and difficult management. Aiming at data diversification and the difference between platform, develop tools and system, making every network teaching resources system as an “information islet”, thus cause the disperse and independence of resources and data, integrate each resources system effectively by looking for a service governance structure. We proposed management system and method for private universities of long-term development. The main research is to set up the unified authentication system which can complete unified authentication and authority and administer. Using the virtual server technology, Information Office will set up a virtual campus portal platform with unified planning and concentration deployment, which is simple operation, advanced technology, safe and reliable, to realize unified management and guarantee the information resources interoperability and consistency.

Design and Implementation of Unified Identity Authentication System Based on LDAP in Digital Campus

With the development of digital campus in university, more and more application systems have been used. In these systems, authentication function has been repeatedly design, which can be easy to cause multiple accounts and passwords, and brought inconvenience to users and administrators. Unified identity authentication system based on LDAP is a good solution to this problem. In this paper, based on the analysis of LDAP protocol and CAS, the unified identity authentication system built for digital campus is designed and implemented, and LDAP management system is also developed to achieve unified management of directory information in the university.

The Design of Digital Campus Unified Identity Authentication System Based on Web Services

Web services technology is loosely-coupled, language-neutral, platform-independent and open. Thus web services are suitable for cross-platform and cross-application integration. Study the web services integration, the data integration and the unified identity authentication with emphasis, and present a scenario of actualizing the integration platform. The platform provide a convenient and efficient unified entrance to assess the university information services. The user can effectively integrate the campus information resources by the application of this platform.

Unified Identity Authentication in Heterogeneous Systems Integration Platform

Unified Identity Authentication in Heterogeneous Systems Integration Platform

Research and Design of Campus Network Unified Identity Authentication System Based on Kerberos

In view of the actual application of the status quo of the current digital campus universities, a unified campus authentication systems and solutions for the overall framework was proposed based on the introduction of Kerberos technology and LDAP protocol, in order to improve the utilization and security of campus resources.

The research and implementation of a unified identity authentication in e-government network

Abstract Current problem existing in e-government network is that the applications of information system are developed independently by various departments, and each has its own specific set of authentication and access control mechanism. To build a comprehensive information system in favor of sharing and exchanging information, a sound and secure unified e-government authentication system is firstly needed. The paper, combining with practical development of e-government network, carries out a thorough discussion on how to achieve data synchronization between unified authentication system and related application systems.

Research on Unified Identity Authentication System Based on LDAP in Campus Network

Research on Unified Identity Authentication System Based on LDAP in Campus Network