面向文化数字资源的数字图书馆统一认证系统的设计与实现

发布时间：2018-12-13 16:12

【摘要】：随着信息技术的飞速发展,越来越多的数字资源通过互联网进行传播。其中数字图书馆是一种通过信息技术来存储和传播文化类数字资源的应用系统,它在互联网上担任着越来越重要的知识文化传播责任。数字图书馆往往包含多台应用服务器,但这些应用服务器之间缺乏安全的信息共享和统一的权限控制,不仅用户信息被分散管理,在访问不同的应用服务器时还需要多次登录,同时混乱的权限管理带来了严重的安全隐患。为了促进数字图书馆的快速发展,并向广大互联网用户提供高质量的文化类数字资源,急需要建立面向数字图书馆的统一认证服务,以提供全面的身份认证支持和权限管理服务。本文对统一认证相关的产品和技术进行调研分析,结合数字图书馆的特点与需求,提出了适用于文化类数字资源的统一认证系统,该系统主要包括以下功能:1.用户信息的统一管理。本文采用Mysql的主/从备份模式,并对BoneCP连接池进行修改,实现了可以进行故障监控和数据库热切换的可靠存储模块,保证了数据的存储安全性和访问可靠性,改善了用户信息混乱存储的局面。2.单点登录功能。本文在 CAS(Central Authentication Service)基础之上,提出了带有规则服务器的认证服务水平扩展方案,该方案既避免了单点故障,还有效提高了全局登录服务能力,解决了用户访问不同应用服务器时需要多次登录的问题。3.文化类数字资源的统一访问控制。本文首先提出变长路径方式的 REST(Representational State Transfer)设计风格,实现了资源描述形式的统一。然后在此基础上,并引入带有权限约束条件的RBAC(Role-based Access Control)模型,实现了灵活安全的权限控制功能,避免了权限管理混乱所带来的安全隐患。依托于国家科技支撑计划“国家数字文化资源统一揭示与服务平台”项目,本文实现了一套统一认证系统,该系统安全完善,最终为国家数字文化服务平台提供了良好的运营支撑服务。
[Abstract]:With the rapid development of information technology, more and more digital resources are transmitted through the Internet. Digital library is an application system which stores and disseminates cultural digital resources through information technology. It plays a more and more important role in knowledge and culture communication on the Internet. Digital libraries often contain multiple application servers, but there is a lack of secure information sharing and unified privilege control between these application servers. Not only is user information decentralized, but also multiple logons are required to access different application servers. At the same time, the confusion of authority management has brought serious security risks. In order to promote the rapid development of digital libraries and to provide high-quality cultural digital resources to the vast number of Internet users, it is urgent to establish a unified authentication service for digital libraries. To provide comprehensive authentication support and authority management services. This paper investigates and analyzes the products and technologies related to unified authentication, and puts forward a unified authentication system suitable for cultural digital resources, combining with the characteristics and requirements of digital libraries. The system mainly includes the following functions: 1. Unified management of user information. In this paper, the master / slave backup mode of Mysql is adopted, and the BoneCP connection pool is modified to realize the reliable storage module which can be used for fault monitoring and database hot switching, which ensures the data storage security and access reliability. Improved user information storage confusion. 2. Single sign-on function. On the basis of CAS (Central Authentication Service), this paper proposes a scheme of extending authentication service level with rule server. This scheme not only avoids single point fault, but also improves the ability of global login service effectively. Solve the user access to different application servers need multiple logins. 3. Unified access control of cultural digital resources. In this paper, the REST (Representational State Transfer) design style of variable length path is proposed, which realizes the unification of resource description. Then, the RBAC (Role-based Access Control) model with privilege constraints is introduced, which realizes the flexible and secure privilege control function and avoids the security hidden trouble caused by the confusion of privilege management. Relying on the National Science and Technology support Program "National Digital Cultural Resources Unification Disclosure and Service platform" project, this paper realizes a unified authentication system, which is safe and perfect. Finally for the national digital culture service platform to provide good operational support services.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：G250.76;TP311.52

【相似文献】