Single sign-on implementation method based on Internet architecture

Abstract

The invention relates to the field of nationwide health information platform subsystem integration, and particularly provides a single sign-on implementation method based on an Internet architecture.According to the method, correspondence between a platform user permission system and a user permission system of each subsystem is realized by adopting a mode of mapping a platform account and an account of each subsystem; a redis recording platform is adopted to record bills, cookies and logout interfaces distributed to all subsystems, kafka is adopted to inform all the subsystems of newly-addedaccount information of the platform, and Nginx is adopted as a reverse agent to achieve load balancing. Compared with the prior art, on one hand, the development cost of each subsystem is reduced, onthe other hand, the workload of maintenance personnel of each subsystem for maintaining user permission is reduced, and the method has good popularization value.

Description

technical field [0001] The invention relates to the field of subsystem integration of the national health information platform, and specifically provides a method for implementing a single sign-on based on an Internet architecture. Background technique [0002] The national health information platform includes six major business applications including public health, family planning, medical services, medical security, drug management and comprehensive management. Using the hub of vertical and horizontal connections, residents' health cards are used as a medium for the masses to enjoy health and family planning services, and a platform for all levels and types of health institutions to realize business application interconnection, information sharing and effective collaboration. [0003] In terms of coverage, the national health information platform needs to connect horizontally with health-related information platforms at the same level, and vertically connects the upper and...

AI Technical Summary

Problems solved by technology

[0005] 1. Establish a permission system to centrally manage the user permission system of each subsystem, that is, the user authentication and authentication of each subsystem must pass through the permission system, which makes the user authentication and authentication modules of each subsystem almost redeveloped. This solution is not only expensive to transform and difficult to promote, but also makes each subsystem rely on the authority system and the authority system is highly coupled

[0006] 2. Synchronize the user information of each subsystem, that is, the user information of the platform and each subsystem is consistent, which means that the existing user and authorization information of most systems fail, and the account and authorization need to be reassigned, which greatly increases maintenance staff workload

Images