基于Web服务的企业统一认证与授权系统

企业为了实现统一调度和统一管理应用系统的目标，统一认证和统一授权的工作越来越重要且趋于复杂化。首先通过分析统一认证和授权系统的背景和系统目标，进一步通过分析比较统一认证、授权方面的知识点和Web服务技术，提出了结合Web服务技术来完成企业在认证和授权方面的统一方式，从而方便应用系统的管理人员来分级管理具体的应用系统，真正做到完全统一的认证与授权，并通过实际的项目来提出具体的服务规范（或接口）设计和实现。

Enterprise unified authentication and authorization system based on Web services

In order to achieve the goal of unified scheduling and unified management in application system, unified authentication and authorization has become more and more important and sophisticated. The background and the goal of unified authentication and unified authorization system were analyzed firstly, then the unified authentication, authorization and Web services were analyzed and compared, and a unified method of authentication and authorization in enterprise combining the Web services was proposed; therefore, it was more convenient to administer the concrete application system for administrator, which truly reconstructed completely unified authentication and authorization, and the design and implementation of the concrete service specification (or interface) by the practical project were given.