Unified authentication system and login method based on same

Abstract

The invention discloses a unified authentication system and a login method. The system comprises a login authentication and authorization management system which is connected with a TICKET server through a service interface module. The method comprises the following steps: a user inputs a user name and a password to enter; if being a legal user, a user terminal produces local session, generates an authentication mark and stores the mark in the user terminal; the TICKET information in the local session is stored in the TICKET server; and when the user accesses a subsystem, the subsystem acquires the TICKET information from the TICKET server according to the authentication mark acquired from the user terminal so as to judge whether the user has right to access the subsystem. In the invention, in the case of subsystem access, the user does not need to carry out any other operation in addition to input the user name and the password, thus being very convenient; and in the case of huge user access quantity, the TICKET server in the system does not become a system bottleneck.

Description

technical field [0001] The invention relates to an authentication system and method for a user to access multiple subsystems, in particular to a unified authentication system and a login subsystem method based on the unified authentication system. Background technique [0002] Developing a large-scale application system often requires developing multiple subsystems according to different businesses or functions to reduce system complexity. If each subsystem has its own user management and user login authentication and authorization mechanism, it will not only increase system development and maintenance costs, reduce system performance and availability, but also not meet the integrity requirements of the application system. Therefore, multiple subsystems generally share a set of user data and a set of login authentication and authorization processes (a unified authentication system), so that users only need to log in once to access all mutually trusted subsystems, that is, us...

AI Technical Summary

Problems solved by technology

[0005] Although the above-mentioned technologies can realize SSO, they have some defects: First, they do not organically combine login, authentication, and authorization, and frequent access to a unified authentication system is required for authentication. When the number of user visits is large, The authentication system will become the bottleneck of the entire system; secondly, the timeliness after the successful login of the user cannot be controlled (the timeliness here refers to: for example, for security reasons, after 12 or 24 hours after the successful login of the user, The session expires automatically, and you must log in again for authentication and authorization)

Images