Process management and security optimization system for intelligent multi-protocol single sign-on authentication

Abstract

The invention discloses a process management and security optimization system for intelligent multi-protocol single sign-on authentication, and the system comprises an interactive process authorization editing module which is used for carrying out the visual arrangement and configuration of a multi-protocol single sign-on authentication process, and automatically generating an authentication process configuration file; the intelligent configuration conflict detection module is used for monitoring arrangement and configuration operations in the authentication process in real time, automatically identifying potential configuration conflicts and providing repair suggestions; the security risk node early warning module is used for evaluating the security risk level of each configuration node in the authentication process in real time and outputting early warning information; and the test sandbox environment module is used for simulating the configuration information of the authentication process in an independent isolation environment and ensuring that the stable operation of the production environment is not influenced by the configuration change. According to the invention, four core functions of interactive process authorization editing, intelligent conflict detection, security risk node early warning and sandbox environment testing are integrated, and a comprehensive and intelligent authentication process management solution is provided for the power industry.

Description

Technical Field

[0001] The present invention relates to the field of information technology, and more specifically to a process management and security optimization system for intelligent multi-protocol single sign-on authentication. Background Art

[0002] In the digital age, login technology is crucial to protecting information system security and user identity. It prevents unauthorized access, ensures the security of data and resources within the system, and is a necessary condition for the normal operation of information systems. With the development of information technology, the number of systems in the power industry has increased, and users frequently switch between different systems. The shortcomings of traditional single sign-on methods have gradually emerged. For example, users need to remember multiple sets of user names and passwords, and the repeated login process is cumbersome and inefficient. Multi-protocol single sign-on technology allows users to access multiple trusted systems with a single identity credential, improving user experience and operational efficiency, and has become a key technology for information construction.

[0003] The informatization process of the power industry continues to deepen, involving multiple links and complex business systems such as power generation, transmission, distribution, and power consumption. In this context, the importance of login technology is significant, and it is the key to ensuring the stable operation of the power system and data security. Multi-protocol single sign-on technology provides the power industry with a unified, convenient, and secure identity authentication solution, which helps to improve business collaboration efficiency, reduce management costs, enhance system security, and ensure the stability and reliability of power supply.

[0004] However, the current multi-protocol single sign-on technology faces a series of challenges in practical applications. On the one hand, the traditional single-point authentication system supports limited authentication protocols, which is difficult to meet the needs of the diversified business system docking in the power industry. Different systems in the power industry are based on different technical architectures and security standards, and require multiple authentication protocols to work together, but the existing system cannot adapt well to this diversity. On the other hand, the authentication process configuration and management are complex, relying on complex text configuration and non-intuitive interface. For power industry personnel, the learning cost and operation difficulty are high, and it is easy to make mistakes and cause security vulnerabilities. In addition, the traditional system lacks an effective security risk warning mechanism, cannot monitor and evaluate potential security risks in real time, and once a problem occurs, it is difficult to respond and handle it in time, which may lead to power data leakage and system failure. Moreover, most systems do not have an independent test environment, and configuration changes cannot be fully verified in a secure environment. Minor mistakes may affect the stability of the production environment and threaten the continuity of power supply. Therefore, how to provide an intelligent multi-protocol single sign-on authentication process management and security optimization system that integrates the four core functions of interactive process authorization editing, intelligent conflict detection, security risk node warning and test sandbox environment, and provides a comprehensive and intelligent authentication process management solution for the power industry is a problem that technicians in this field need to solve urgently. Summary of the invention

[0005] In view of this, the present invention provides a process management and security optimization system for intelligent multi-protocol single sign-on authentication. Visual process editing allows users to intuitively arrange authentication processes without having to understand the details of the underlying protocol; intelligent conflict detection monitors configuration operations in real time, discovers and resolves potential conflicts, and ensures accurate and safe configuration; security risk node warning evaluates node risk levels in real time, and reminds users to deal with hidden dangers in a visual manner; the test sandbox environment provides an independent and secure testing space to prevent configuration errors from affecting the production environment and ensure the stable operation of the power system. The system can be applied to the power industry to provide the power industry with a comprehensive and intelligent authentication process management solution.

[0006] In order to achieve the above object, the present invention adopts the following technical solution:

[0007] Intelligent multi-protocol single sign-on authentication process management and security optimization system, including:

[0008] Interactive process authorization editing module: used for visual arrangement and configuration of multi-protocol single sign-on authentication processes, and automatic generation of authentication process configuration files;

[0009] Intelligent configuration conflict detection module: used to monitor the orchestration and configuration operations in the authentication process in real time, automatically identify potential configuration conflicts and provide repair suggestions;

[0010] Security risk node warning module: used to evaluate the security risk level of each configuration node in the authentication process in real time and output warning information;

[0011] Test sandbox environment module: used to simulate the configuration information of the authentication process in an independent isolated environment to ensure that configuration changes do not affect the stable operation of the production environment.

[0012] Preferably, the interactive process authorization editing module includes:

[0013] Node library module: used to set and store various types of nodes;

[0014] Connection line module: used to connect different nodes through connection lines. The generated connection relationship represents the data flow direction of the authentication process.

[0015] Attribute configuration module: used to configure the attribute information of each node;

[0016] Process generation module: used to automatically generate authentication process configuration files based on node attribute information and connection relationships.

[0017] Preferably, the nodes include user nodes, application nodes, authentication nodes and authorization nodes;

[0018] Attribute information includes node name, protocol type, authentication method, and authorization rules.

[0019] Preferably, the intelligent configuration conflict detection module includes:

[0020] Configuration information acquisition module: used to obtain the orchestration and configuration operations in the authentication process in real time;

[0021] Rule base module: used to set and store configuration rules for multiple protocols;

[0022] Conflict detection module: used to match the edited configuration information with the configuration rules and identify potential configuration conflicts;

[0023] Repair suggestion module: used to provide corresponding repair suggestions based on the type of configuration conflict detected.

[0024] Preferably, the intelligent configuration conflict detection module further includes:

[0025] Conflict prompt module: used to display configuration conflicts in a visual way.

[0026] Preferably, the security risk node early warning module includes:

[0027] Node information acquisition module: used to obtain the configuration information of each node in the authentication process;

[0028] Risk assessment module: used to perform security risk assessment on the configuration information of each node according to the security rule base;

[0029] Warning information generation module: used to generate corresponding warning information based on the security risk assessment results.

[0030] Preferably, the security risk node early warning module also includes:

[0031] Warning information display module: used to display warning information in a visual way.

[0032] Preferably, the test sandbox environment module includes:

[0033] Sandbox environment creation module: used to create an independent sandbox environment according to the test scenario;

[0034] Configuration deployment module: used to deploy the configuration information of the authentication process into the sandbox environment;

[0035] Simulation operation module: used to simulate the user access authentication process according to the preset test cases after configuration deployment, and record the log information during the operation process;

[0036] Result analysis module: used to analyze the log information of the simulation operation, determine whether the authentication process is executed as expected, and generate a test report.

[0037] It can be seen from the above technical solutions that, compared with the prior art, the present invention discloses a process management and security optimization system for intelligent multi-protocol single sign-on authentication, which has the following advantages:

[0038] 1) Innovative interactive process authorization editing function: Users can drag and drop nodes and connecting lines through a graphical interface to build an authentication process. The system will automatically generate configuration information without the need for users to write code, which reduces configuration difficulty and improves efficiency.

[0039] 2) Advanced security optimization function: The system monitors the user's configuration operations in real time, automatically identifies potential conflicts based on the built-in protocol rule library and provides repair suggestions. At the same time, it evaluates the security risks of each node in the authentication process and issues early warnings in a visual way, helping users to deal with potential security risks in a timely manner and improve the security of the system.

[0040] 3) Allow users to simulate and verify the authentication process in an independent isolated environment, effectively avoid the impact of configuration errors on the production environment, ensure stable operation of the system, and provide users with a safe and reliable testing environment. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0042] Figure 1 This is a structural block diagram of the process management and security optimization system for the intelligent multi-protocol single sign-on authentication provided by the present invention.

[0043] Figure 2 This is a structural block diagram of the interactive process authorization editing module provided by the present invention.

[0044] Figure 3 This is a structural block diagram of the intelligent configuration conflict detection module provided by the present invention.

[0045] Figure 4 This is a structural block diagram of the security risk node early warning module provided by the present invention.

[0046] Figure 5 This is a structural block diagram of the test sandbox environment module provided by the present invention. DETAILED DESCRIPTION

[0047] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0048] The embodiment of the present invention discloses a process management and security optimization system for intelligent multi-protocol single sign-on authentication, such as Figure 1 As shown, including:

[0049] Interactive process authorization editing module: used for visual arrangement and configuration of multi-protocol single sign-on authentication processes, and automatic generation of authentication process configuration files;

[0050] Intelligent configuration conflict detection module: used to monitor the orchestration and configuration operations in the authentication process in real time, automatically identify potential configuration conflicts and provide repair suggestions;

[0051] Security risk node warning module: used to evaluate the security risk level of each configuration node in the authentication process in real time and output warning information;

[0052] Test sandbox environment module: used to simulate the configuration information of the authentication process in an independent isolated environment to ensure that configuration changes do not affect the stable operation of the production environment.

[0053] The present invention supports visual arrangement of authentication processes of multiple protocols such as SAML and OAuth2 through interactive process authorization editing function, and realizes automatic generation of configuration information. This design enables users to quickly and safely configure complex authentication processes without in-depth understanding of the details of the underlying protocol. At the same time, the intelligent configuration conflict detection function monitors user configuration operations in real time, automatically identifies potential conflicts and provides repair suggestions, effectively avoiding human errors and ensuring the correctness and security of configuration.

[0054] Then, the system's integrated security risk node warning function can evaluate the security risk level of each node in the authentication process in real time, and remind users to deal with potential safety hazards in a timely manner through visualization and warning information, further improving the security and reliability of the system.

[0055] Finally, the test sandbox environment provided by the system allows users to simulate and verify the authentication process in an independent and isolated environment, effectively avoiding the impact of configuration errors on the production environment and ensuring stable operation of the system.

[0056] To sum up, the present invention constructs an intuitive, secure and reliable intelligent multi-protocol single sign-on authentication process management and security optimization system, providing users with efficient and secure authentication process management solutions, significantly improving the system's configuration efficiency, security and user experience, thereby meeting the market's urgent needs for intelligence, multi-protocol support and high security.

[0057] In this embodiment, if Figure 2 As shown, the interactive process authorization editing module includes:

[0058] Node library module: preset multiple types of nodes, such as user nodes, application nodes, authentication nodes, authorization nodes, etc. Each node corresponds to a specific authentication or authorization function.

[0059] Connection line module: used to connect different nodes through connection lines to indicate the data flow of the authentication process.

[0060] Attribute configuration module: used to configure the attribute information of each node, such as node name, protocol type, authentication method, authorization rules, etc.

[0061] Process generation module: automatically generates the corresponding authentication process configuration file based on the node's attribute information and connection relationship.

[0062] It can be customized for various business systems in the power grid environment, such as power grid dispatching system, power marketing system, power grid data information monitoring system, etc. In the power grid dispatching system, the user nodes in the node library module can be set as dispatchers with different authority levels, the application nodes are associated with specific dispatching operation applications, and the authentication nodes and authorization nodes are strictly configured according to the power grid safety specifications and operating procedures. When connecting each node, it is necessary to follow the specific logic of the power grid data flow to ensure that the data transmission from the power grid real-time data collection node to the dispatching decision node and then to the execution node is accurate, so as to automatically generate an authentication process configuration file that meets the power grid safety requirements.

[0063] Interactive process authorization editing module workflow:

[0064] Select the node type in the node library module (such as user node, application node, authentication node, authorization node, etc.), which has specific authentication or authorization functions.

[0065] The connection line module connects the selected nodes in the node library module through connection lines to determine the data flow direction of the authentication process.

[0066] After determining the basic process and nodes, the user configures the authorization, authentication and data flow attributes of the nodes in the existing process in the attribute configuration module.

[0067] According to the attribute information and connection relationship of the nodes, the process generation module automatically generates the corresponding authentication process configuration file.

[0068] The detailed workflow of the interactive process authorization editing module is as follows:

[0069] 1. Node selection

[0070] The user enters the interactive process authorization editing interface, which displays the node library module in the form of a classified list or a graphical icon library. The node library module contains user nodes, application nodes, authentication nodes, and authorization nodes, which are represented by human icons, application icons, lock icons, and permission badge icons, respectively, and are accompanied by clear text annotations. In the power grid environment, user nodes can represent power grid work roles with different permission levels, such as power grid dispatcher roles, inspector roles, etc., and their permissions are associated with the operation permissions of the power grid system. Application nodes are associated with power grid-related application systems, such as power grid dispatching systems and power marketing systems. These application systems are closely related to the power grid's power generation, transmission, distribution, and power consumption. For example, the power grid dispatching system is used to monitor the power grid's operating status in real time and perform dispatching operations, and the power marketing system is used to process user power consumption data and electricity bill settlement. Users select the required node type by clicking or touching the mouse according to the power grid business logic requirements. When selecting a node, the interface displays a brief functional description and usage scenario examples of the node in real time to help users understand the role of the node in the power grid environment. Users can select multiple nodes in sequence and make selections according to the order of the power grid authentication process, and support the cancellation of selection operations.

[0071] 2. Process construction

[0072] After the user completes the node selection, the connection line module is activated. Specific connection points will be displayed around the selected node. The user drags the connection line with the mouse, drags the connection point of the source node to the connection point of the target node to establish a connection and determine the data flow direction. In the power grid system, the data flow must follow the logic of the power grid operation, such as from the power grid real-time data acquisition library node to the data processing node (such as the data center node), then to the dispatch decision node (such as the power grid dispatch center node), and finally to the execution node (such as query, modify data nodes, etc.). The system performs real-time logic checks to prevent the formation of closed loops and ensure the rationality of data flow. If there are logical errors in the power grid authentication process constructed by the user, the system will remind the user to adjust in a friendly manner to ensure the accuracy of data transmission and operation of the power grid system.

[0073] 3. Property configuration

[0074] After the user clicks the attribute configuration module, the attribute configuration panel for the currently selected node pops up. The panel organizes attribute options in a hierarchical structure or tabbed form, and users can configure attributes such as node name, protocol type, authentication method, and authorization rules. In a power grid environment, the protocol type may involve power grid data communication protocols, and the authentication method may include digital certificate-based authentication, password authentication, etc. The authorization rules are set according to the positions and responsibilities of power grid staff. For example, dispatchers have control authorization authority, while ordinary inspectors only have authorization to query status. The system performs format and logic verification in real time to ensure that required items have been filled in, numerical attributes are within a reasonable range, and the selected protocol is compatible with the configuration parameters. If the attribute value entered by the user does not meet the safety and operation requirements of the power grid, the system will display an error message and prevent the configuration from being saved until the error is corrected.

[0075] 4. Configuration file generation

[0076] After the user completes the attribute configuration of all nodes, the process generation module comprehensively sorts out and verifies the configured node information, connection relationships and attribute values ​​to ensure the integrity and correctness of the authentication process. After the verification is passed, the user configuration is converted into an authentication process configuration file in a standardized format according to the predefined configuration file template and the system's internal configuration rules. In the power grid system, the configuration file contains detailed node definitions, such as the specific parameters and function descriptions of the system authority nodes, connection relationship descriptions, such as the connection method of the power grid data transmission link, and other related configuration information, such as power grid security policy configuration, etc., and is temporarily stored in the system for users to download or directly apply. The system records the generation history of the configuration file to facilitate the version management and traceability of the power grid system. If a configuration error or incompleteness is found during the generation process, the system will stop generating and report an error message to guide the user to make modifications to ensure the accuracy and reliability of the power grid authentication process configuration.

[0077] The interactive process authorization editing module provided by the embodiment of the present invention has the following technical effects:

[0078] Visual process orchestration: Users can easily create authentication flow charts by dragging and dropping the graphical interface, without having to write complex configuration files, which reduces the difficulty of configuration.

[0079] Multi-protocol support: The node library module presets nodes of various protocol types, supporting users to flexibly select and combine different authentication protocols to meet the needs of multi-protocol integration.

[0080] Automatic generation of configuration information: The process generation module automatically generates configuration files, avoiding the tediousness and error-proneness of manual configuration and improving configuration efficiency and accuracy.

[0081] It should be noted that the above content is only an example. In actual implementation, the module structure and workflow can be adjusted according to specific needs.

[0082] In this embodiment, if Figure 3 As shown, the intelligent configuration conflict detection module includes:

[0083] Configuration information acquisition module: Real-time acquisition of user editing operations on authentication process configuration information, such as adding, modifying, or deleting nodes or configuration parameters in the power grid system. In the power grid environment, editing operations may involve the addition or removal of data, such as adding relevant information to the authentication process of other software systems, or modifying the configuration parameters of power grid communication nodes, such as adjusting the data transmission rate, etc. These operations will be captured in real time by the configuration information acquisition module.

[0084] Rule base module: preset configuration rules for multiple protocols. The rule base should cover the specific configuration requirements and restrictions of SAML and OAuth2 protocols. For example, the assertion attribute requirements of SAML protocol, the authorization code type restrictions of OAuth2 protocol, and the conflict rules that may exist between different protocols. For SAML and OAuth2 protocols, the legal value range and format requirements should be clarified; for protocols such as SAML and OAuth2 that may be involved in the power grid, clarify their legal value range, format requirements, and special rules when they work together in the power grid environment. For example, when SAML protocol and OAuth2 protocol are used simultaneously in the unified identity authentication system of the power grid, the settings of certain specific parameters may lead to inconsistent authentication information or repeated authentication problems. Such situations should be included in the conflict rule base to ensure the accuracy and security of the power grid authentication system.

[0085] Conflict detection module: matches the configuration information edited by the user with the rules in the rule base module to identify potential configuration conflicts. Potential configuration conflicts refer to the situation in which, during the configuration of the intelligent multi-protocol single sign-on authentication process, the configuration operations performed by the user (including adding, modifying, deleting nodes or configuration parameters, etc.) cause the node configuration, node relationship, protocol usage or other related configuration elements in the authentication process to fail to meet the requirements in the pre-set configuration rule base, which may cause authentication failure, security vulnerabilities, system instability or functional abnormalities.

[0086] Conflict prompt module: Prompts users with conflict information in a visual manner, such as highlighting conflicting configuration items on the power grid monitoring interface, marking incorrectly configured nodes with a red flashing box, and popping up a prompt box to explain the cause of the conflict in detail, such as prompting users that the protocol parameters of a certain node do not meet the requirements of the power grid communication protocol, so that power grid operation and maintenance personnel can discover and handle conflicts in a timely manner.

[0087] Repair suggestion module: Provides corresponding repair suggestions based on the detected conflict type, such as modifying configuration parameters, selecting other node types, etc. The specific conflict types and repair suggestions are as follows:

[0088] Protocol parameter conflict

[0089] Conflict example: In the OAuth2 protocol, the validity period of the authorization code (expires_in parameter) is configured as 100 seconds, but the rule base stipulates that this parameter must be between 300 seconds and 3600 seconds.

[0090] Repair suggestion: The system prompts users to change the authorization code validity period (expires_in parameter) to a value between 300 seconds and 3600 seconds, such as 600 seconds, to comply with the standard requirements of the OAuth2 protocol, ensure that the authorization process is carried out within a reasonable time frame, and avoid poor user experience due to too short validity period or security risks due to too long validity period.

[0091] Node connection conflict

[0092] Conflict example: In the single sign-on authentication process based on the SAML protocol, an additional conversion node is mistakenly added between the identity provider (IdP) node and the service provider (SP) node, destroying the direct connection relationship specified by the SAML protocol.

[0093] Repair suggestion: It is recommended that users delete the additional conversion node and re-establish the direct connection between the identity provider (IdP) node and the service provider (SP) node to ensure that the authentication data of the SAML protocol can interact directly according to the standard process to avoid authentication failures or security vulnerabilities due to node connection errors.

[0094] Conflicting use of protocol combinations

[0095] Conflict example: When using both SAML and OAuth2 protocols for single sign-on authentication, the token verification of the OAuth2 protocol is configured to be performed before the response processing of the SAML protocol, which violates the correct order in which the two protocols work together.

[0096] Repair suggestion: Remind users to adjust the authentication process configuration and place the response processing step of the SAML protocol before the token verification of the OAuth2 protocol to ensure that the two protocols interact in the prescribed order, avoiding authentication logic confusion and potential security risks caused by incorrect protocol execution order.

[0097] Node attribute incompatibility conflict

[0098] Conflict example: When using a specific version of the authentication protocol, the authentication node selects the AES-128 encryption algorithm, but the rule base stipulates that the protocol version only supports the AES-256 encryption algorithm.

[0099] Repair suggestion: Instruct users to modify the encryption algorithm properties of the authentication node to AES-256 to make it compatible with the currently used protocol version, ensure that data encryption and decryption operations during the authentication process can be performed correctly, and ensure data security.

[0100] Node duplicate verification conflict

[0101] Conflict example: The user's username attribute is repeatedly verified at some nodes of the SAML and OAuth2 protocols, which may lead to performance degradation and the risk of inconsistent user information.

[0102] Repair suggestion: It is recommended that users check the entire authentication process and determine that one of the nodes is responsible for user name attribute verification. Other nodes rely on the verification results of this node according to business needs to avoid repeated verification operations, optimize authentication performance and ensure the consistency of user information.

[0103] Data format mismatch conflict

[0104] Conflict example: The user identity information format output by the user authentication node is in JSON format, while the subsequent permission authorization node expects to receive the XML format, resulting in the data being unable to be parsed correctly.

[0105] Repair suggestion: Prompt users to add a data format conversion function in the user authentication node or the intermediate conversion node (if it exists), convert the user identity information into XML format before passing it to the permission authorization node, or adjust the permission authorization node to make it compatible with JSON format data input to ensure accurate transmission and processing of data between different nodes.

[0106] The configuration information acquisition module of this module captures grid-related configuration operations in real time, such as the adjustment of grid data transmission protocol parameters, changes in node connection relationships between different business systems, etc. The rule base module stores a variety of protocol configuration rules for the characteristics of grid business, such as the unique protocol requirements in grid data communication, and the configuration restrictions on data interaction between different security areas. When a conflict is detected, such as in the grid remote monitoring system, if it is found that the configuration of a monitoring node does not conform to the grid security communication protocol rules, the conflict detection module accurately identifies the conflict type, and the conflict prompt module prompts the operation and maintenance personnel in a striking manner on the grid monitoring interface. The repair suggestion module provides specific suggestions such as modifying configuration parameters and adjusting node connection methods according to the conflict type to ensure the accuracy and security of the grid system configuration.

[0107] Intelligent configuration conflict detection module workflow:

[0108] When the user configures the authentication process, the configuration information acquisition module captures the user's editing operations in real time.

[0109] The conflict detection module matches the acquired configuration information with the rules in the rule base module, determines whether there is a conflict, and records the conflict information.

[0110] If a conflict is detected in the conflict detection module, the conflict prompt module prompts the user with the conflict information in a striking manner, such as highlighting the conflicting configuration item in red, and popping up a prompt box to explain the cause of the conflict in detail.

[0111] At the same time, based on the conflict information from the conflict detection module, the repair suggestion module provides feasible repair suggestions according to the conflict type, such as suggesting that users modify configuration parameters, select other node types, or adjust the process structure.

[0112] Among them, the specific implementation process of the conflict detection module is described as follows:

[0113] ① The conflict detection module uses the configuration rules set in the rule base module as a reference, and uses the system hook or event monitoring mechanism to capture all operations performed by users on the authentication process configuration interface in real time. Whether it is adding a new node, modifying node attributes (such as modifying the protocol type, adjusting authentication parameters, etc.) or deleting a node, it can be perceived in time and the detailed information of the relevant operation can be recorded, including the time of the operation, the operation object (specific node or configuration item) and the operation content (new value or deletion operation identifier, etc.).

[0114] ② The conflict detection module uses a rule-based matching algorithm. The obtained user-edited configuration information is parsed to extract key configuration elements, such as node type, protocol parameters, data flow relationship, etc. These elements are then compared with the configuration rules in the rule base one by one. For complex configuration scenarios, a depth-first search (DFS) is used to traverse the entire authentication process configuration structure. For example, when detecting configuration conflicts across multiple nodes and protocols, starting from the starting node, each node and its related configuration is checked in turn according to the data flow to ensure that all possible conflicting combinations are checked.

[0115] ③ Assume that the first node where the user login request enters the system is determined, assuming it is the "user authentication node", mark it as visited, and confirm its next access node, such as the "authorization node", through the DFS algorithm. In the rule base module rule base, if it is found that an unallowed assertion attribute value is used in the configuration, or the authorization decision algorithm does not meet the standard, such as the rule base stipulates that role-based authorization decisions must be used, but attribute-based authorization decisions are used in the configuration and have not been specially authorized, the system determines that there is a conflict.

[0116] ④ During the entire depth-first search process, each time a conflict is detected, the system immediately records the detailed information of the conflict, including the node where the conflict occurs, the configuration item, the conflict type (such as protocol incompatibility, parameter error, format mismatch, etc.) and the comparison with the corresponding rules in the rule base.

[0117] The intelligent configuration conflict detection module provided by the embodiment of the present invention can identify potential conflicts in user configuration operations in real time and provide repair suggestions, thereby effectively avoiding human errors and improving the correctness and security of configuration.

[0118] In this embodiment, if Figure 4 As shown, the security risk node warning module includes:

[0119] Node information acquisition module: obtains the configuration information of each node in the authentication process, such as protocol type, authentication method, encryption algorithm, etc.

[0120] Risk assessment module: Based on the security rule base, security risk assessment is performed on the configuration information of each node, such as protocol version security, configuration security, etc., and corresponding risk levels are given, such as low risk, medium risk, and high risk.

[0121] Warning information generation module: Generates corresponding warning information based on the security risk assessment results, such as prompt information of high-risk nodes, repair suggestions, etc.

[0122] Warning information display module: displays warning information to users in a visual way, such as using different colors or icons to mark nodes of different risk levels in the flow chart, and displaying risk warning information on the nodes.

[0123] The node information acquisition module obtains the configuration information of the authentication process nodes of each business system of the power grid, such as the power grid data encryption algorithm, identity authentication method, and permission management strategy. The risk assessment module conducts risk assessment on these configuration information based on the power grid security rule base, which contains common security vulnerability information, compliance requirements, and risk assessment standards for the characteristics of power grid data in the power grid industry. For example, for nodes involved in the transmission of key control instructions of the power grid, if the encryption algorithm strength is insufficient, the risk assessment module will determine it as a high-risk node. The early warning information generation module generates corresponding early warning information, and the early warning information display module displays it in a visual way on the power grid operation and maintenance monitoring platform, such as marking high-risk nodes with red flashing icons, and displaying detailed risk descriptions and repair suggestions next to the nodes, so that power grid operation and maintenance personnel can deal with potential safety hazards in a timely manner and ensure the stable operation of the power grid system.

[0124] Security risk node warning module workflow:

[0125] The node information acquisition module obtains the configuration information of each node in the authentication process in real time.

[0126] The risk assessment module collects and organizes known vulnerability information for the SAML protocol, such as identity forgery vulnerabilities and signature verification bypass vulnerabilities in specific versions. The features related to these vulnerabilities (such as the affected protocol version range, vulnerability triggering conditions, etc.) are included in the rule base. For the OAuth2 protocol, relevant information such as authorization code leakage risks and token hijacking vulnerabilities are also organized and added to the security rule base to conduct security risk assessments on nodes and give corresponding risk levels.

[0127] The early warning information generation module generates corresponding early warning information according to the risk assessment results.

[0128] The warning information display module displays warning information to users in a striking manner, such as marking high-risk nodes in red and displaying detailed risk descriptions and repair suggestions.

[0129] Among them, the specific implementation process of the risk assessment module is described as follows:

[0130] In the power grid environment, risk assessment of SAML protocol nodes is crucial. First, the SAML protocol version used by the node needs to be obtained from the node revocation information. If the various business systems of the power grid, such as the power grid dispatching system and the power marketing system, use the SAML protocol for identity authentication, the accuracy of the version information has a huge impact. For SAML protocol nodes, the SAML protocol version used should be obtained from the node revocation information, and the known vulnerability information corresponding to the version should be found in the security rule library, such as the identity forgery vulnerability and signature verification bypass vulnerability in a specific version. If the protocol version used by the node is known to have a high-risk vulnerability, the current node is determined to be a high-risk node. For example, if the security rule library records that the SAML 1.0 version has a serious identity forgery vulnerability, and the node configuration happens to be the SAML 1.0 series version, the risk level of the node is increased to high risk; at the same time, the node configuration parameters are evaluated and the node configuration parameters are checked, such as assertion attribute settings, signature algorithm selection, etc. If the configuration parameters do not meet the standard configuration specified in the security rule library (for example, an insecure signature algorithm is used), the risk level is increased. For example, the security rule base stipulates that the RSA-SHA256 signature algorithm should be used, but the node is configured with the MD5 signature algorithm, which may make the signature easy to forge, thereby increasing the risk level. For the connection relationship between the identity provider (IdP) node and the service provider (SP) node, check whether it complies with the standard connection mode specified by the SAML protocol. If there is an abnormal connection (such as adding additional non-standard conversion nodes), the risk level is increased because this may undermine the security of the authentication process, resulting in authentication failure or security vulnerabilities.

[0131] For OAuth2 protocol nodes, protocol configuration parameters should be checked, such as the authorization code validity period (expires_in parameter), token type, etc. Compare with the OAuth2 protocol standard parameter range specified in the security rule base. If the authorization code validity period is set too short (such as 100 seconds, while the rule base stipulates that it should be between 300 seconds and 3600 seconds), it may lead to poor user experience (frequent re-authorization) and increase a certain risk level; if it is set too long, it may bring security risks (such as the authorization code can be used for a long time after being stolen), which will also increase the risk level. The token security of OAuth2 protocol nodes in the power grid should cover token generation, storage and transmission methods. In the power grid automation system, if the token storage is not secure (such as plain text stored in a temporary file), it is very easy to be stolen. Once the token is stolen, the attacker can obtain the legitimate user's operating permissions and illegally tamper with the data, making it difficult to recover or maintain the data information. If the token transmission is not encrypted, and the security rule base requires encryption, the risk level will be significantly increased. Because unencrypted tokens can be easily intercepted and tampered with during transmission, leading to problems such as authorization code leakage and token hijacking, endangering the safe and stable operation of the power grid.

[0132] By performing the above detailed assessments on the SAML and OAuth2 protocol nodes in the power grid environment, the risk level of each node can be comprehensively and accurately determined based on the node configuration information and security rule base. This helps power grid computer operation and maintenance personnel to promptly detect and deal with potential security risks and ensure the safe and stable operation of the power grid system. For example, in power grid upgrade and transformation projects, the risk assessment can be used to evaluate new access services and interfaces to ensure that they meet power grid safety standards and effectively avoid power grid accidents caused by authentication node security issues.

[0133] The above is a description of the specific implementation process of the risk assessment module. The specific implementation method performs risk assessment based on the configuration information of each node and the security rule base, but is not limited to this and the specific situation should be examined.

[0134] The security risk node early warning module provided by the embodiment of the present invention can evaluate the security risk level of each node in the authentication process in real time, and promptly remind users to deal with potential security risks, effectively improving the security and reliability of the system.

[0135] In this embodiment, if Figure 5 As shown, the test sandbox environment modules include:

[0136] Sandbox environment creation module: Create an independent sandbox environment based on the test scenario selected by the user, such as cloning the configuration information of the production environment, simulating different user identities, etc.

[0137] Configuration deployment module: deploys the authentication process configuration information edited by the user into the sandbox environment.

[0138] Simulation operation module: According to the preset test cases, simulate the user access authentication process and record the log information during the operation.

[0139] Result analysis module: Analyze the log information of the simulation operation, determine whether the authentication process is executed as expected, and generate a test report.

[0140] The sandbox environment creation module creates independent sandbox environments according to different test scenarios of the power grid, such as simulating user login scenarios during peak load of the power grid, emergency operation scenarios of personnel with different permissions during power grid failure, etc. The configuration and deployment module deploys the configuration information of the power grid-related authentication process into the sandbox environment. The simulation operation module simulates the access authentication process such as dispatcher operation and patrol personnel login according to the preset power grid test cases, and records detailed log information, including power grid data request and response content, operation time, etc. The result analysis module analyzes the log information, determines whether the authentication process is executed as expected, and generates a test report containing performance indicators related to the power grid test scenario (such as power grid data processing response time, operation success rate, etc.), providing a strong basis for power grid system configuration optimization and security improvement.

[0141] Test sandbox environment module workflow:

[0142] The user selects the scenario to be tested, and the sandbox environment creation module creates an independent sandbox environment.

[0143] The configuration deployment module extracts the corresponding authentication process configuration information, which is created by the user configuration in the interactive process authorization editing module, and attempts to deploy it into the sandbox environment.

[0144] The simulation operation module simulates the user access authentication process according to the preset test cases and records the log information during the operation.

[0145] The result analysis module analyzes the log information of the simulation operation, determines whether the authentication process is executed as expected, and generates a test report, such as showing the pass rate of test cases, error information of failed cases, etc.

[0146] The detailed workflow of the test sandbox environment module is as follows:

[0147] Scene selection and sandbox creation

[0148] ① The user enters the operation interface of the test sandbox environment module, and the system displays a series of predefined test scenario options to the user. These scenarios cover the common authentication process usage of the power grid. For example, the normal login scenario simulates different types of power grid staff (such as dispatchers, operation and maintenance personnel, meter readers, etc.) logging into the power grid-related system under standard conditions to ensure their normal access rights and operation functions; abnormal login scenarios, such as multiple password errors (simulating power grid users or staff forgetting passwords or entering incorrect passwords), attempting to log in after the account is locked (such as power grid employee accounts being locked due to security policies and then regaining access to login permissions), etc., test the system's ability to handle abnormal situations; multi-device login scenarios simulate the same power grid staff logging in on different devices (such as office computers, mobile inspection devices, etc.) at the same time to check the system's compatibility and security for simultaneous access to multiple devices; different permission user access scenarios, including administrators, ordinary users, guests, etc. accessing different power grid resources (such as administrators' rights to modify power grid system configuration parameters, ordinary users' rights to view power grid operation data, and guests' rights to access power grid publicity information, etc.), verify the accuracy of permission management. Each scenario option is accompanied by a brief description to help users understand its scope of application. The user selects one or more test scenarios (combined selections are available) based on the current power grid test requirements. After the selection is completed, the sandbox environment creation module starts to create an independent sandbox environment. First, the module clones relevant configuration information from the production environment or the preset basic configuration template according to the selected scenario, including basic environment configurations such as unused power grid service scenarios (including different service software application scenarios, such as settlement, transaction data collection, etc.), network settings, and database structures (such as database table structures for storing power grid permissions, roles, user information, etc.). Then, the cloned configuration is adjusted in a targeted manner according to the scenario requirements, such as the operating system version (such as simulating power grid monitoring software running on different operating systems), network environment (such as simulating data communication under different network bandwidths and delays), etc.; when simulating access scenarios for users with different permissions, user accounts and related permission data of different permission levels will be initialized, such as creating an administrator account and granting it the permission to manage the power grid system configuration, creating an ordinary user account and granting it the permission to view the power grid operation data, etc., to provide a real and effective simulation environment for subsequent tests.

[0149] ② The user selects one or more test scenarios (combinations can be selected) based on the current test requirements. After the selection is completed, the sandbox environment creation module begins to create an independent sandbox environment. First, the module will clone relevant configuration information from the production environment or the preset basic configuration template according to the selected scenario, including basic environment configurations such as system architecture, network settings, and database structure. Then, the cloned configuration is adjusted in a targeted manner according to the scenario requirements. For example, when simulating a multi-device login scenario, the parameters of multiple virtual devices will be configured, such as the device type, operating system version, network environment, etc.; when simulating access scenarios for users with different permissions, user accounts and related permission data at different permission levels will be initialized.

[0150] Configure deployment

[0151] ① The configuration deployment module interacts with the interactive process authorization editing module to obtain the authentication process configuration information created by the user in the module. During the acquisition process, the configuration information will be checked for integrity and consistency to ensure that all necessary configuration items exist and are in the correct format. For example, check whether the association between the authentication node and the authorization node is correctly defined, whether the protocol configuration parameters comply with the corresponding protocol specifications, etc. For details, please refer to similar process operations in the intelligent configuration conflict detection module and the security risk node warning module.

[0152] ② After the inspection is passed, the authentication process configuration information is converted and adapted according to the requirements of the sandbox environment so that it can run correctly in the sandbox environment. For example, adjust the database connection string to point to the test database in the sandbox environment; redirect resource references such as file paths to ensure that the corresponding resources can be found in the sandbox environment. Then, deploy the adapted configuration information to the sandbox environment. During the deployment process, the deployment progress will be monitored in real time, and the deployment status information will be displayed to the user on the interface. For complex power grid task requirements, manual configuration deployment can be tried to ensure that the configuration information is accurately deployed in the sandbox environment to prepare for subsequent testing.

[0153] Simulation run and logging

[0154] ① The simulation operation module starts immediately after the configuration and deployment are completed. It first accurately loads the test cases that match the selected test scenarios from the preset test case library. In the power grid marketing business scenario, these test cases have a detailed description of the behavior sequence of simulated users. For example, in the scenario of ordinary user electricity bill inquiry, a legal electricity customer number (such as "C001") and password (such as "xyz789") will be clearly given. The operation steps include clicking the login button in the power grid marketing service platform, and then entering the electricity bill inquiry area page, selecting the query time period (such as the past three months) on this page, and the expected system response is to be able to log in smoothly and jump to the electricity bill inquiry result display page, and accurately return the user's electricity bill details in this time period, such as monthly electricity consumption, electricity unit price, total electricity bill, and payment status. According to the setting of the test case, the simulation operation module strictly simulates the user access authentication process in sequence. During the simulation process, it will simulate various user operation behaviors with high accuracy, such as simulating mouse click operations, just like a real user clicking an operation button in the power grid marketing system (such as a button to submit an electricity bill inquiry application); simulating keyboard input operations, accurately entering the electricity customer number, password and various operation instructions (such as instructions to change the password), etc.; simulating network request operations, realistically simulating the user terminal sending data requests to the server (such as electricity customers sending electricity bill inquiry requests to the power grid marketing server through mobile phones), etc.

[0155] ② According to the test case settings, the simulation operation module simulates the user access authentication process in turn. During the simulation process, the user's operation behavior will be accurately simulated, including simulated mouse clicks, keyboard input, network requests and other operations. Each operation will be recorded in detail in the log information, and the real-time response status of the system will be recorded at the same time. The log information includes not only the basic description of the operation (such as "user [user name] clicked the login button at [time]"), but also detailed data related to the operation (such as the content of the login request data packet sent, the response status code and response data returned by the server, etc.). In addition, key events and status changes within the system will also be recorded, such as the internal algorithm execution process when the authentication node performs password verification, the query statement and results of the authorization node querying the permission database, etc.

[0156] Result analysis and report generation

[0157] ① After the simulation is completed, the result analysis module starts working. First, the log information recorded by the simulation module is comprehensively analyzed. The module will compare the actual operation results one by one according to the expected results defined in the test case. For example, check whether the login operation is successful (by comparing whether the returned status code is the expected success status code), whether the user rights are correctly assigned (comparing the returned user rights information with the expected rights settings), and whether the access and operation of system resources meet expectations (such as whether the data in the database is correctly written or read, whether the relevant service interface is correctly called, etc.).

[0158] ② During the comparison process, if the actual result is inconsistent with the expected result, immediately record the error information in detail, including the location of the error (such as which node or operation step has a problem), the error type (such as authentication failure, insufficient permissions, data mismatch, etc.) and related detailed data (such as incorrect return value, incorrect database operation statement, etc.). At the same time, calculate the pass rate of the test case based on the comparison results. The pass rate calculation formula is: the number of passed test cases ÷ the total number of test cases × 100%.

[0159] ③Finally, the result analysis module generates a test report based on the analysis results. The test report is presented in a clear and intuitive format, including a test overview (basic information such as test scenario, test time, tester, etc.), test case execution (the execution result of each test case, including pass or fail, with detailed error information, if any), test case pass rate, performance indicators (such as the response time of the authentication process, resource usage, etc., which can be extracted and calculated from the log information), and summary and suggestions (summarize the test results, point out the problems and potential risks of the system, and provide improvement suggestions, such as optimizing configuration parameters, fixing vulnerabilities, etc.).

[0160] The test sandbox environment module provided by the embodiment of the present invention has the following advantages:

[0161] Isolate testing to prevent misoperation: After modifying the protocol configuration, the system will create an isolated sandbox environment and apply the modified configuration to the sandbox environment for testing to prevent misoperation from affecting the actual production environment.

[0162] Simulate and verify the process: Users can simulate the authentication process in a sandbox environment, verify whether the configuration is correct, and troubleshoot problems through visual log information.

[0163] Visual logs for easy troubleshooting: The system displays the log information of the simulation process in a visual way, such as the request and response data of each node, user identity information, etc., to facilitate users to quickly locate problems.

[0164] Version control: perform version control operations on the system to ensure security.

[0165] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0166] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. Intelligent multi-protocol single sign-on authentication process management and security optimization system, characterized by: include: Interactive process authorization editing module: used for visual arrangement and configuration of multi-protocol single sign-on authentication processes, and automatic generation of authentication process configuration files; Intelligent configuration conflict detection module: used to monitor the orchestration and configuration operations in the authentication process in real time, automatically identify potential configuration conflicts and provide repair suggestions; Security risk node warning module: used to evaluate the security risk level of each configuration node in the authentication process in real time and output warning information; Test sandbox environment module: used to simulate the configuration information of the authentication process in an independent isolated environment to ensure that configuration changes do not affect the stable operation of the production environment.

2. According to claim 1, the intelligent multi-protocol single sign-on authentication process management and security optimization system is characterized in that: The interactive process authorization editing module includes: Node library module: used to set and store various types of nodes; Connection line module: used to connect different nodes through connection lines. The generated connection relationship represents the data flow direction of the authentication process. Attribute configuration module: used to configure the attribute information of each node; Process generation module: used to automatically generate authentication process configuration files based on node attribute information and connection relationships.

3. The intelligent multi-protocol single sign-on authentication process management and security optimization system according to claim 2 is characterized in that: Nodes include user nodes, application nodes, authentication nodes, and authorization nodes; Attribute information includes node name, protocol type, authentication method, and authorization rules.

4. The intelligent multi-protocol single sign-on authentication process management and security optimization system according to claim 1 is characterized in that: The intelligent configuration conflict detection module includes: Configuration information acquisition module: used to obtain the orchestration and configuration operations in the authentication process in real time; Rule base module: used to set and store configuration rules for multiple protocols; Conflict detection module: used to match the edited configuration information with the configuration rules and identify potential configuration conflicts; Repair suggestion module: used to provide corresponding repair suggestions based on the type of configuration conflict detected.

5. The intelligent multi-protocol single sign-on authentication process management and security optimization system according to claim 4 is characterized in that: The intelligent configuration conflict detection module also includes: Conflict prompt module: used to display configuration conflicts in a visual way.

6. The intelligent multi-protocol single sign-on authentication process management and security optimization system according to claim 1 is characterized in that: The security risk node warning module includes: Node information acquisition module: used to obtain the configuration information of each node in the authentication process; Risk assessment module: used to perform security risk assessment on the configuration information of each node according to the security rule base; Warning information generation module: used to generate corresponding warning information based on the security risk assessment results.

7. The intelligent multi-protocol single sign-on authentication process management and security optimization system according to claim 6 is characterized in that: The security risk node warning module also includes: Warning information display module: used to display warning information in a visual way.

8. The intelligent multi-protocol single sign-on authentication process management and security optimization system according to claim 1 is characterized in that: The test sandbox environment modules include: Sandbox environment creation module: used to create an independent sandbox environment according to the test scenario; Configuration deployment module: used to deploy the configuration information of the authentication process into the sandbox environment; Simulation operation module: used to simulate the user access authentication process according to the preset test cases after configuration deployment, and record the log information during the operation process; Result analysis module: used to analyze the log information of the simulation operation, determine whether the authentication process is executed as expected, and generate a test report.

Images