Application integration method based on register and call control

Abstract

A kind of application conformity method based on registration and call control, firstly building a application supporting platform based on call command, the operation application system is registeredon the registration service system via resource conformity service system, and distributed to the operation application system resource mark, when user uses the operation application system, Its digital certificate is firstly registered in the registration service system, if the digital certificate is passed, user obtain corresponding authority, if else, the connection is stopped; when the operation system is in using, user calls the application system and provides the mark information to log on the application system, without strong identity authentication. So single point logging of multipleapplication and network area is realized, developing complexity and risk of safety service is decreased, the quick conformity of credit service in application supporting platform is realized.

Description

technical field [0001] The present invention relates to application integration, and more particularly to application integration over large networks. technical background [0002] With the rapid development of Internet information technology such as e-government and e-commerce, higher requirements are put forward for the speed, simplicity and security of network application systems. The traditional user name + password authentication method has been unable to meet the security requirements encountered in the process of business growth. At present, the main solution to computer information security is to build a public key infrastructure (PKI, Public Key Infrastructure) to issue digital certificates for network entities, and to achieve strong authentication of network entity identities through digital certificate-based asymmetric cryptography. Our country has studied this field for many years, and many application systems use PKI technology. [0003] At present, the applic...

AI Technical Summary

Problems solved by technology

[0004] 1) For application system transformation based on security middleware, it is necessary to learn and test and verify the development interface on the basis of understanding the principles of PKI technology and asymmetric cryptography technology. Only on this basis can the business logic of the application system be transformed. Many application developers are not familiar with PKI and related technologies. The use of security middleware is quite difficult, the development efficiency is low, and even wrong use occurs. As a result, although security services are used, they do not really provide protection for information security;

[0005] 2) The transformation of the running application system may affect the stability of the application system, thereby affecting the normal business;

[0006] 3) Many existing application systems have been built for a long time, and developers of some application systems no longer exist or provide technical support. Such applications cannot be transformed based on security middleware technology;

[0007] 4) An SSL gateway is added before the application system, which can reduce the amount of application development to a certain extent, but only supports the application of the browser / server structure, and cannot support the application of the client / server structure

Moreover, an SSL gateway is added before each system, and users must perform identity authentication before accessing each system, which increases the complexity of use, which can be used for application transformation with only a small number of browser / server structures, and for multi-application systems difficult to implement

Images