E home user and unified identity authentication system

Abstract

The invention belongs to the technical field of identity authentication, and particularly relates to an E home user and unified identity authentication system. The unified identity authentication system comprises a unified identity authentication basic service module, a user management module, a single sign-on module, a unified user database module, a user account management module, a unified identity authentication service module, a statistical query module, an application access management module and a characteristic function module. Identity authentication of users can be completed in the system in a centralized mode, the system users integrated to the unified identity authentication system can achieve one-point login and whole-network roaming through the system, and the unified identity authentication system provides unified user management and identity authentication services for members of all application systems. And after the user successfully logs in any system, the user can directly access other systems without logging in again.

Description

Technical Field

[0001] The present invention belongs to the technical field of identity authentication, and in particular relates to an E-family user and a unified identity authentication system. Background Art

[0002] The identity authentication system is a vital technology used to verify the identity of users. It is widely used in online services, banks, government agencies, and internal company systems to ensure that only authorized users can access specific resources or services. Common identity authentication methods include traditional password authentication and more secure multi-factor authentication (MFA), which combines two or more authentication methods, such as password plus SMS verification code, fingerprint recognition, facial recognition, etc., to improve security. In addition, biometric technology uses a person's unique biological characteristics, such as fingerprints, facial recognition, iris scanning, voice recognition, etc. for identity authentication. Physical devices such as smart cards and tokens are also commonly used means of authentication. Single sign-on (SSO) technology allows users to access multiple related but independent systems through a single login without having to authenticate in each system separately. Digital certificates and public key infrastructure (PKI) are used to ensure the security and privacy of communications. Behavioral analysis and biometric behavioral recognition technologies verify identity by analyzing user usage habits and behavior patterns, such as typing rhythm, mouse movement patterns, etc. Social authentication verifies identity by linking users' social media accounts.

[0003] Traditional identity authentication systems require knowing the user's identity in advance and providing an initialization password for the corresponding user, which brings great inconvenience in management. For example, it is impossible to provide good management support for various groups of people, such as people who come to the school temporarily to attend various meetings, prospective freshmen who have not been admitted or have not entered the academic affairs system, and students who have registered for various training courses in the school. On the other hand, the strategy of initializing passwords in traditional identity authentication systems brings great security risks to users. For this reason, we propose an E-home user and unified identity authentication system to solve the above problems. Summary of the invention

[0004] The purpose of the present invention is to provide an E-family user and unified identity authentication system, which can centrally complete the user's identity authentication in the system. System users integrated into the unified identity authentication system can log in at one point through this system and roam the entire network. The unified identity authentication system provides unified user management and identity authentication services for members of all application systems. After a user successfully logs in to any system, he can directly access other systems without having to log in again.

[0005] The technical solution adopted by the present invention is as follows:

[0006] E-home users and a unified identity authentication system, the unified identity authentication system includes a unified identity authentication basic service module, a user management module, a single sign-on module, a unified user database module, a user account management module, a unified identity authentication service module, a statistical query module, an application access management module, and a special function module.

[0007] In a preferred solution, the unified identity authentication basic service module provides user identity verification, single sign-on session management and cross-system roaming, supports traditional account + password method, as well as third-party account login, manages device information, SIM card, App login account, biometric information and key authentication information, provides user profile, password modification, authentication log, account binding self-service functions, supports dynamic SMS verification code login method, and provides password change SMS notification function, and provides secondary login setting function for high-security level systems. The user management module manages the user's basic information and affiliated organization, supports user group management, reflects the department structure in the system operation, each department contains different users and has different permissions, sets permissions for roles, allows roles to be used as executors, automatically grants permissions to all users in the role, specifies permissions for each user, and assigns them to different departments or roles, supports composite permissions, controls all permission objects of the system, modules, and operations, supports the import and export of department, role, personal relationship diagrams and structural hierarchies, and completes database synchronization and permission setting for newly imported organization information.

[0008] In a preferred embodiment, the single sign-on module manages the information and configuration of different application systems, provides a personalized configuration interface for single sign-on of individual users, provides Web services for identity authentication and password modification services for other systems to call, supports unified management and mapping functions of different system accounts, supports single sign-on methods for simulated login and Web authentication login, and the unified user database module saves all user data in a tree structure, including user name, account information, user group, organizational structure, user authentication service based on LDAP standard, supports LDAP 3.0 interface protocol, provides data search, comparison, addition, deletion, and modification functions, and supports regular backup and export backup functions of user database.

[0009] In a preferred solution, the user account management module provides a Web interface to implement user account management, including query, addition, modification, deletion, and LDAP data batch synchronization functions, and supports automatic synchronization of data between the user management database and the storage database. The unified identity authentication service module encapsulates the service interface for verifying the system account and password identity, and publishes it as a Web service for other systems to call, and provides a Web service for modifying user passwords. Other application systems modify passwords by calling this service. The statistical query module performs classified statistics based on department and user status information, generates statistical reports, and supports exporting Excel functions.

[0010] In a preferred solution, the application access management module accepts access applications from various types of applications, provides online access business processing and technical support, supports standardized and customized application integration, supports centralized management of business applications in different fields of private cloud and public cloud, synchronizes the account information of business applications to the system through the secondary development interface, supports LDAP interface protocol and mainstream databases, supports identity authentication based on CAS standards, supports QQ and WeChat OAuth2.0 open authentication interfaces, and the special function module supports login verification by the main scanning and the scanned QR code, and supports homomorphic encryption and real-time encryption.

[0011] In a preferred solution, the operation of the E-home user and the unified identity authentication system includes user registration and initialization. New users register through the system front-end page. For temporary users, the system supports non-perceived registration. After the user fills in the mobile phone number, student number or work number information, the system automatically identifies and verifies the identity. For new students or newly hired faculty and staff, the system automatically obtains data from the personnel or teaching system and synchronizes it to the unified identity authentication system, automatically creates users and assigns initial permissions. The system synchronizes user information from the personnel system and teaching system to the unified identity authentication system through LDAP or other interface protocols. The operation of the E-home user and the unified identity authentication system also includes identity authentication. The user logs in to the system using an account password or a third-party login method. The system verifies the user's identity information through an identity authentication service. After the user successfully logs in, he roams between different application systems. The system manages the session through a single sign-on. When the user accesses different applications, the system verifies the user's identity information through a Web service interface.

[0012] In a preferred solution, the operation of the E-family user and the unified identity authentication system also includes permission management. The system automatically assigns permissions based on the user's department and role information, presets permissions for roles, and assigns users to corresponding roles. The administrator manually adjusts the user's role and permissions through the Web management interface, and adjusts permissions for a large number of users through the batch import / export function. When the user's role or department changes, the system automatically synchronizes the permission information, and the organizational structure is adjusted. The administrator batch updates the permission relationship between departments, roles and users through the organizational import / export function. The operation of the E-family user and the unified identity authentication system also includes application access and management. Various business application systems access the unified identity authentication platform through online access applications. The system supports standardized application integration and custom application integration. After the access application is approved, the application system is connected to the unified identity authentication system through LDAP, CAS or OAuth2.0 interface protocols. The accessed application system realizes unified management and mapping of accounts through the unified identity authentication platform. The administrator views the user account status of all accessed applications through the unified management interface, and performs unified permission allocation and adjustment.

[0013] In a preferred embodiment, the operation of the E-home user and the unified identity authentication system also includes user self-service. Users view and modify personal information through the self-service interface, including changing passwords, viewing authentication logs, and managing bound third-party accounts. If there is an abnormality in the user's identity authentication, the system will automatically identify it to the administrator and the user, and prompt them to perform corresponding verification processing. The user submits the question through the self-service interface, and the administrator processes it after review. The operation of the E-home user and the unified identity authentication system also includes security management. The system supports multiple authentication credential management, including device information, SIM card, App login information, and biometric information. The system regularly backs up user data. The system provides user login security by collecting device information, biometric information, and login accounts. When the user changes the device or SIM card, the system automatically detects and prompts the user to perform additional identity authentication. The system automatically backs up the user database according to a preset time period.

[0014] In a preferred solution, the operation of the E-home user and the unified identity authentication system also includes statistics and queries. The system provides a statistical query function. The administrator classifies and counts user information according to department, user status, and role dimensions, generates detailed statistical reports, and exports the statistical results as Excel files. The system supports key monitoring of the activities of specific users or roles. The operation of the E-home user and the unified identity authentication system also includes application scenarios and smart campus cards. The system supports the smart campus electronic card function. Users use electronic campus cards through mobile terminals to achieve identity authentication, access control, book borrowing, and canteen consumption functions. The system supports multiple campus card types, such as personal campus cards for teachers and students, class campus cards, grade campus cards, and community campus cards. Freshmen or new employees can use The non-perception registration function allows advance registration. The system automatically matches user identities based on admission information or personnel data and grants corresponding permissions. When user identities change, the system automatically adjusts or revokes permissions. The operation of the E-home user and unified identity authentication system also includes system maintenance and support. Administrators configure the system through the Web management interface, including single sign-on settings, authentication method selection, and security policy configuration. The system supports flexible configuration options and is customized according to the specific needs of the school. The system provides an API interface to support secondary development and function expansion. The operation of the E-home user and unified identity authentication system also includes user experience optimization. Users can make personalized configurations in the personal settings interface based on their own usage habits, and users can solve common problems through the self-service interface.

[0015] In a preferred solution, the operation of the E-family user and unified identity authentication system also includes system monitoring and performance optimization. The system monitors each submodule in real time through a built-in monitoring module. The monitoring content includes key performance indicators such as CPU usage, memory usage, and interface response time. When the system detects an abnormal situation, it automatically triggers an alarm mechanism and notifies the system administrator via SMS or email. The abnormal situation includes interface response timeout and too many user login failures. The system records the user's operation behavior, including login time, accessed applications, and operation records. The system automatically optimizes performance bottlenecks based on real-time monitoring data, including adjusting resource allocation and optimizing database queries. The administrator regularly obtains system performance analysis reports, which include system load, interface response time, and user login success rate. The system A cache mechanism is introduced to cache commonly used data. The operation of the E-home user and unified identity authentication system also includes log auditing and compliance management. The system records the operation logs of all users, including login, data modification, and permission change operations. The log content includes operation time, operation type, and operation results. The system administrator audits the user's operation log, and the audit log cannot be changed. The administrator can quickly locate the operation record of a specific user through the log query function. The system automatically checks whether the user's permissions are compliant according to the preset permission strategy. If abnormal permission allocation is found, the administrator is automatically notified for processing. The system regularly performs data compliance checks. If data anomalies are found, the data repair mechanism is automatically triggered. The system regularly performs security compliance checks according to security policies. If security vulnerabilities are found, the administrator is automatically notified for processing.

[0016] The technical effects achieved by the present invention are:

[0017] Users only need to log in once to access multiple application systems, which greatly reduces the number of logins and improves user experience. It provides a personalized configuration interface for single-point login for individual users, which users can configure according to their needs. It supports multiple authentication methods such as traditional account + password, third-party account login, dynamic SMS verification code, biometric information and key authentication information, which improves the security of the system. It provides a secondary login setting function for high-security level systems to further enhance security. The system regularly backs up user data to ensure data security. It supports multiple authentication credentials such as device information, SIM card, and biometric information to improve user login security.

[0018] The system automatically assigns permissions based on the user's department and role information, presets permissions for roles, and assigns users to corresponding roles, reducing the administrator's workload. When the user's role or department changes, the system automatically synchronizes permission information. When the organizational structure is adjusted, the administrator can batch update permission relationships through the import / export function. It supports standardized application integration and custom application integration. After the access application is approved, the application system is connected to the unified identity authentication system through a unified interface protocol. The accessed application system realizes unified management and mapping of accounts through the unified identity authentication platform. The administrator can view the user account status of all accessed applications through the unified management interface and perform unified permission allocation and adjustment.

[0019] Administrators can configure the system through the Web management interface, including single sign-on settings, authentication method selection, and security policy configuration. Customized settings are supported based on the specific needs of the school. The system provides an API interface to support secondary development and function expansion to meet the special needs of the school. Users can view and modify their personal information through the self-service interface, including changing passwords, viewing authentication logs, and managing bound third-party accounts, which improves user autonomy and convenience. It supports the smart campus electronic card function. Users can use electronic campus cards through mobile terminals to achieve identity authentication, access control, book borrowing, canteen consumption and other functions, which improves the level of intelligent campus management.

[0020] The system supports seamless registration of temporary users, automatic identification and identity verification, automatic synchronization of data of new students or new employees to the unified identity authentication system through the personnel or academic affairs system, automatic creation of users and assignment of initial permissions, and supports cross-system roaming. When users access different applications, the system verifies the user's identity information through the Web service interface, thereby improving the convenience and efficiency of access. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 It is a schematic diagram of the system structure of the E-family user and the unified identity authentication system of the present invention;

[0022] Figure 2 It is a schematic diagram of the composition of the E-family user and unified identity authentication system of the present invention. DETAILED DESCRIPTION

[0023] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the accompanying drawings.

[0024] See also Figure 1-2As shown, the present invention provides an E-family user and unified identity authentication system, which includes a unified identity authentication basic service module, a user management module, a single sign-on module, a unified user database module, a user account management module, a unified identity authentication service module, a statistical query module, an application access management module, and a special function module.

[0025] The unified identity authentication basic service module provides user identity verification, single sign-on session management and cross-system roaming, supports traditional account + password method, as well as third-party account login, manages device information, SIM card, App login account, biometric information and key authentication information, provides user profile, password modification, authentication log, account binding self-service functions, supports dynamic SMS verification code login method, and provides password change SMS notification function, and provides secondary login setting function for high-security level systems. The user management module manages the user's basic information and affiliated institutions, supports user group management, reflects the department structure in the system operation, each department contains different users and has different permissions, sets permissions for roles, allows roles to be used as executors, automatically grants permissions to all users in the role, specifies permissions for each user, and assigns them to different departments or roles, supports composite permissions, controls all permission objects of the system, modules, and operations, supports the import and export of department, role, personal relationship diagrams and structural hierarchies, and completes database synchronization and permission settings for newly imported institutional information.

[0026] The single sign-on module manages the information and configuration of different application systems, provides a personalized configuration interface for individual users' single sign-on, provides Web services for identity authentication and password modification services for other systems to call, supports unified management and mapping of different system accounts, supports single sign-on methods for simulated login and Web authentication login, and the unified user database module saves all user data in a tree structure, including user name, account information, user group, organizational structure, user authentication service based on LDAP standard, supports LDAP 3.0 interface protocol, provides data search, comparison, addition, deletion, and modification functions, and supports regular backup and export backup functions of user database.

[0027] The user account management module provides a Web interface to implement user account management, including query, add, modify, delete, and LDAP data batch synchronization functions. It supports automatic synchronization of data between the user management database and the storage database. The unified identity authentication service module encapsulates the service interface for verifying the system account and password identity, and publishes it as a Web service for other systems to call. It provides a Web service for modifying user passwords. Other application systems modify passwords by calling this service. The statistical query module performs classified statistics based on department and user status information, generates statistical reports, and supports export to Excel.

[0028] The application access management module accepts access applications from various applications, provides online access business processing and technical support, supports standardized and customized application integration, supports centralized management of business applications in different fields of private cloud and public cloud, synchronizes account information of business applications to the system through secondary development interfaces, supports LDAP interface protocols and mainstream databases, supports identity authentication based on CAS standards, supports QQ and WeChat OAuth2.0 open authentication interfaces, and the special function modules support login verification by scanning the main and scanned QR codes, and support homomorphic encryption and real-time encryption.

[0029] The operation of E-home users and the unified identity authentication system includes user registration and initialization. New users register through the system front-end page. For temporary users, the system supports non-perceived registration. After the user fills in the mobile phone number, student number or work number information, the system automatically identifies and verifies the identity. For new students or newly hired faculty and staff, the system automatically obtains data from the personnel or teaching system and synchronizes it to the unified identity authentication system, automatically creates users and assigns initial permissions. The system synchronizes user information from the personnel system and teaching system to the unified identity authentication system through LDAP or other interface protocols. The operation of E-home users and the unified identity authentication system also includes identity authentication. Users log in to the system using their account password or third-party login method. The system verifies the user's identity information through the identity authentication service. After the user successfully logs in, he roams between different application systems. The system manages the session through single sign-on. When the user accesses different applications, the system verifies the user's identity information through the Web service interface.

[0030] The operation of E-home users and the unified identity authentication system also includes permission management. The system automatically assigns permissions based on the user's department and role information, presets permissions for roles, and assigns users to corresponding roles. Administrators manually adjust user roles and permissions through the Web management interface, and adjust permissions for large batches of users through the batch import / export function. When the user's role or department changes, the system automatically synchronizes permission information, and the organizational structure is adjusted. Administrators use the organizational import / export function to batch update the permission relationship between departments, roles and users. The operation of E-home users and the unified identity authentication system also includes application access and management. Various business application systems access the unified identity authentication platform through online access applications. The system supports standardized application integration and custom application integration. After the access application is approved, the application system is connected to the unified identity authentication system through LDAP, CAS or OAuth2.0 interface protocols. The accessed application system realizes unified management and mapping of accounts through the unified identity authentication platform. Administrators view the user account status of all accessed applications through the unified management interface and perform unified permission allocation and adjustment.

[0031] The operation of Ejia users and the unified identity authentication system also includes user self-service. Users can view and modify their personal information through the self-service interface, including changing passwords, viewing authentication logs, and managing bound third-party accounts. If there is an abnormality in the user's identity authentication, the system will automatically identify it to the administrator and user, and prompt them to perform the corresponding verification process. Users submit questions through the self-service interface, and the administrator will review and process them. The operation of Ejia users and the unified identity authentication system also includes security management. The system supports the management of multiple authentication credentials, including device information, SIM card, App login information, and biometric information. The system regularly backs up user data. The system provides user login security by collecting device information, biometric information, and login accounts. When users change devices or SIM cards, the system automatically detects and prompts users to perform additional identity authentication. The system automatically backs up the user database according to the preset time period.

[0032] The operation of E-home users and the unified identity authentication system also includes statistics and queries. The system provides statistical query functions. Administrators classify and count user information according to department, user status, and role dimensions, generate detailed statistical reports, and export statistical results as Excel files. The system supports key monitoring of the activities of specific users or roles. The operation of E-home users and the unified identity authentication system also includes application scenarios and smart campus cards. The system supports the smart campus electronic card function. Users use electronic campus cards through mobile terminals to realize identity authentication, access control, book borrowing, and canteen consumption functions. The system supports multiple campus card types, such as personal campus cards for teachers and students, class campus cards, grade campus cards, and club campus cards. New students or new employees can register in advance through the non-perception registration function. The system automatically matches user identities based on admission information or personnel data and grants corresponding permissions. When the user identity changes, the system automatically adjusts or revokes their permissions.

[0033] The operation of the E-home user and unified identity authentication system also includes system maintenance and support. The administrator configures the system through the Web management interface, including single sign-on settings, authentication method selection, and security policy configuration. The system supports flexible configuration options and customized settings based on the specific needs of the school. The system provides an API interface to support secondary development and function expansion. The operation of the E-home user and unified identity authentication system also includes user experience optimization. Users can perform personalized configuration in the personal settings interface according to their own usage habits, and users can solve common problems through the self-service interface;

[0034] The operation of E-home user and unified identity authentication system also includes system monitoring and performance optimization. The system monitors each sub-module in real time through the built-in monitoring module. The monitoring content includes key performance indicators such as CPU usage, memory usage, and interface response time. When the system detects an abnormal situation, it automatically triggers the alarm mechanism and notifies the system administrator through SMS and email. Abnormal situations include interface response timeout and too many user login failures. The system records the user's operation behavior, including login time, accessed applications, and operation records. The system automatically optimizes performance bottlenecks based on real-time monitoring data, including adjusting resource allocation and optimizing database queries. Administrators regularly obtain system performance analysis reports, which include system load, interface response time, and user login success rate. The system introduces a cache machine system, caches commonly used data, and the operation of the E-home user and unified identity authentication system also includes log auditing and compliance management. The system records the operation logs of all users, including login, data modification, and permission change operations. The log content includes operation time, operation type, and operation results. The system administrator audits the user's operation log, and the audit log cannot be changed. The administrator can quickly locate the operation record of a specific user through the log query function. The system automatically checks whether the user's permissions are compliant according to the preset permission strategy. If abnormal permission allocation is found, the administrator is automatically notified for processing. The system regularly performs data compliance checks. If data anomalies are found, the data repair mechanism is automatically triggered. The system regularly performs security compliance checks according to security policies, and automatically notifies the administrator for processing if security vulnerabilities are found.

[0035] In the present invention, users only need to log in once to access multiple application systems, which greatly reduces the number of login times and improves user experience. It provides a personalized configuration interface for individual users to log in single-point, and users can configure it according to their needs. It supports multiple authentication methods such as traditional account + password, third-party account login, dynamic SMS verification code, biometric information and key authentication information, which improves the security of the system. It provides a secondary login setting function for high-security level systems to further enhance security. The system regularly backs up user data to ensure data security, supports multiple authentication credentials such as device information, SIM card, and biometric information, and improves user login security.

[0036] The system automatically assigns permissions based on the user's department and role information, presets permissions for roles, and assigns users to corresponding roles, reducing the administrator's workload. When the user's role or department changes, the system automatically synchronizes permission information. When the organizational structure is adjusted, the administrator can batch update permission relationships through the import / export function. It supports standardized application integration and custom application integration. After the access application is approved, the application system is connected to the unified identity authentication system through a unified interface protocol. The accessed application system realizes unified management and mapping of accounts through the unified identity authentication platform. The administrator can view the user account status of all accessed applications through the unified management interface and perform unified permission allocation and adjustment.

[0037] The system supports seamless registration of temporary users, automatic identification and identity verification, automatic synchronization of data of new students or new employees to the unified identity authentication system through the personnel or academic affairs system, automatic creation of users and assignment of initial permissions, and supports cross-system roaming. When users access different applications, the system verifies the user's identity information through the Web service interface, thereby improving the convenience and efficiency of access.

[0038] The above is only a preferred embodiment of the present invention. It should be noted that, for those skilled in the art, several improvements and modifications can be made without departing from the principles of the present invention, and these improvements and modifications should also be considered as the protection scope of the present invention. The structures, devices and operating methods not specifically described and explained in the present invention shall be implemented according to the conventional means in the art unless otherwise specified and limited.

Claims

1. E-home user and unified identity authentication system, characterized by: The unified identity authentication system includes a unified identity authentication basic service module, a user management module, a single sign-on module, a unified user database module, a user account management module, a unified identity authentication service module, a statistical query module, an application access management module, and a special function module.

2. The E-family user and unified identity authentication system according to claim 1, characterized in that: The unified identity authentication basic service module provides user identity verification, single sign-on session management and cross-system roaming, supports traditional account + password method, as well as third-party account login, manages device information, SIM card, App login account, biometric information and key authentication information, provides user profile, password modification, authentication log, account binding self-service functions, supports dynamic SMS verification code login method, and provides password change SMS notification function, and provides secondary login setting function for high-security level systems. The user management module manages the user's basic information and affiliated organization, supports user group management, reflects the department structure in the system operation, each department contains different users and has different permissions, sets permissions for roles, allows roles to be used as executors, automatically grants permissions to all users in the role, specifies permissions for each user, and assigns them to different departments or roles, supports composite permissions, controls all permission objects of the system, modules, and operations, supports the import and export of department, role, personal relationship diagrams and structural hierarchies, and completes database synchronization and permission setting for newly imported organization information.

3. The E-family user and unified identity authentication system according to claim 1, characterized in that: The single sign-on module manages the information and configuration of different application systems, provides a personalized configuration interface for individual user single sign-on, provides Web services for identity authentication and password modification services for other systems to call, supports unified management and mapping functions of different system accounts, supports single sign-on methods for simulated login and Web authentication login, and the unified user database module saves all user data in a tree structure, including user name, account information, user group, organizational structure, user authentication service based on LDAP standard, supports LDAP 3.0 interface protocol, provides data search, comparison, addition, deletion, and modification functions, and supports regular backup and export backup functions of user database.

4. The E-family user and unified identity authentication system according to claim 1, characterized in that: The user account management module provides a Web interface to implement user account management, including query, add, modify, delete, and LDAP data batch synchronization functions, and supports automatic synchronization of data between the user management database and the storage database. The unified identity authentication service module encapsulates the service interface for verifying the system account and password identity, and publishes it as a Web service for other systems to call, and provides a Web service for modifying user passwords. Other application systems modify passwords by calling this service. The statistical query module performs classified statistics based on department and user status information, generates statistical reports, and supports exporting to Excel.

5. The E-family user and unified identity authentication system according to claim 1, characterized in that: The application access management module accepts access applications from various types of applications, provides online access business processing and technical support, supports standardized and customized application integration, supports centralized management of business applications in different fields of private cloud and public cloud, synchronizes account information of business applications to the system through the secondary development interface, supports LDAP interface protocol and mainstream databases, supports identity authentication based on CAS standards, supports QQ and WeChat OAuth2.0 open authentication interfaces, and the special function module supports verification and login by scanning the main and scanned QR codes, and supports homomorphic encryption and real-time encryption.

6. The E-family user and unified identity authentication system according to claim 1, characterized in that: The operation of the E-home user and unified identity authentication system includes user registration and initialization. New users register through the system front-end page. For temporary users, the system supports non-perceived registration. After the user fills in the mobile phone number, student number or work number information, the system automatically identifies and verifies the identity. For new students or newly hired faculty and staff, the system automatically obtains data from the personnel or teaching system and synchronizes it to the unified identity authentication system, automatically creates users and assigns initial permissions. The system synchronizes user information from the personnel system and teaching system to the unified identity authentication system through LDAP or other interface protocols. The operation of the E-home user and unified identity authentication system also includes identity authentication. The user logs in to the system using an account password or a third-party login method. The system verifies the user's identity information through the identity authentication service. After the user successfully logs in, he roams between different application systems. The system manages the session through a single sign-on. When the user accesses different applications, the system verifies the user's identity information through the Web service interface.

7. The E-family user and unified identity authentication system according to claim 1, characterized in that: The operation of the E-family user and the unified identity authentication system also includes permission management. The system automatically assigns permissions based on the user's department and role information, presets permissions for roles, and assigns users to corresponding roles. The administrator manually adjusts the user's role and permissions through the Web management interface, and adjusts permissions for a large number of users through the batch import / export function. When the user's role or department changes, the system automatically synchronizes the permission information, and the organizational structure is adjusted. The administrator batch updates the permission relationship between departments, roles and users through the organizational import / export function. The operation of the E-family user and the unified identity authentication system also includes application access and management. Various business application systems access the unified identity authentication platform through online access applications. The system supports standardized application integration and custom application integration. After the access application is approved, the application system is connected to the unified identity authentication system through LDAP, CAS or OAuth2.0 interface protocols. The accessed application system realizes unified management and mapping of accounts through the unified identity authentication platform. The administrator views the user account status of all accessed applications through the unified management interface, and performs unified permission allocation and adjustment.

8. The E-family user and unified identity authentication system according to claim 1, characterized in that: The operation of the E-home user and unified identity authentication system also includes user self-service. Users view and modify personal information through the self-service interface, including changing passwords, viewing authentication logs, and managing bound third-party accounts. If there is an abnormality in the user's identity authentication, the system will automatically identify it to the administrator and user, and prompt them to perform corresponding verification processing. Users submit questions through the self-service interface, and the administrator will process them after review. The operation of the E-home user and unified identity authentication system also includes security management. The system supports multiple authentication credential management, including device information, SIM card, App login information, and biometric information. The system regularly backs up user data. The system provides user login security by collecting device information, biometric information, and login accounts. When the user changes the device or SIM card, the system automatically detects and prompts the user to perform additional identity authentication. The system automatically backs up the user database according to a preset time period.

9. The E-family user and unified identity authentication system according to claim 1, characterized in that: The operation of the E-home user and unified identity authentication system also includes statistics and queries. The system provides statistical query functions. The administrator classifies and counts user information according to department, user status, and role dimensions, generates detailed statistical reports, and exports statistical results as Excel files. The system supports key monitoring of activities of specific users or roles. The operation of the E-home user and unified identity authentication system also includes application scenarios and smart campus cards. The system supports the smart campus electronic card function. Users use electronic campus cards through mobile terminals to realize identity authentication, access control, book borrowing, and canteen consumption functions. The system supports multiple campus card types, such as personal campus cards for teachers and students, class campus cards, grade campus cards, and community campus cards. New students or new employees can register without perception. The function is registered in advance, and the system automatically matches the user identity according to the admission information or personnel data and grants the corresponding permissions. When the user identity changes, the system automatically adjusts or revokes its permissions. The operation of the E-home user and unified identity authentication system also includes system maintenance and support. The administrator configures the system through the Web management interface, including single sign-on settings, authentication method selection, and security policy configuration. The system supports flexible configuration options and is customized according to the specific needs of the school. The system provides an API interface to support secondary development and function expansion. The operation of the E-home user and unified identity authentication system also includes user experience optimization. Users can make personalized configurations in the personal settings interface according to their own usage habits, and users can solve common problems through the self-service interface.

10. The E-family user and unified identity authentication system according to claim 1, characterized in that: The operation of the E-family user and unified identity authentication system also includes system monitoring and performance optimization. The system monitors each sub-module in real time through the built-in monitoring module. The monitoring content includes key performance indicators such as CPU usage, memory usage, and interface response time. When the system detects an abnormal situation, it automatically triggers the alarm mechanism and notifies the system administrator through SMS and email. The abnormal situation includes interface response timeout and too many user login failures. The system records the user's operation behavior, including login time, accessed applications, and operation records. The system automatically optimizes performance bottlenecks based on real-time monitoring data, including adjusting resource allocation and optimizing database queries. The administrator regularly obtains system performance analysis reports, which include system load, interface response time, and user login success rate. The system introduces a cache machine system, caches commonly used data. The operation of the E-family user and unified identity authentication system also includes log auditing and compliance management. The system records the operation logs of all users, including login, data modification, and permission change operations. The log content includes operation time, operation type, and operation results. The system administrator audits the user's operation log, and the audit log cannot be changed. The administrator can quickly locate the operation record of a specific user through the log query function. The system automatically checks whether the user's permissions are compliant according to the preset permission strategy. If abnormal permission allocation is found, the administrator is automatically notified for processing. The system regularly performs data compliance checks. If data anomalies are found, the data repair mechanism is automatically triggered. The system regularly performs security compliance checks according to security policies. If security vulnerabilities are found, the administrator is automatically notified for processing.

Images