基于PKI/PMI和Agent的电力企业单一登录方法

针对电力企业信息系统集成的高安全性要求，提出一种基于电力行业公钥基础设施/授权管理基础设施(public key infrastructure/privilege management infrastructure，PKI/PMI)的单一登录模型，并给出相关算法的具体实现过程。单一登录系统通过PKI/PMI完成身份认证和授权功能，同时采用基于代理的系统模型，让用户使用统一账号登录，同时不用修改旧的账号/口令系统，从而尽可能少地修改应用服务程序就能满足电力企业网络信息安全要求。该系统为电力企业集成操作和实现安全的统一调度提供了参考。

Research of Single Sign-On Access Method for Power Enterprises Based on PKI/PMI and Agent

In view of the requirement of high security in information system integration for power enterprises,a single sign-on model based on public key infrastructure(PKI) and privilege management infrastructure(PMI) for power industry is proposed,and concrete implementation of related algorithm is given.The identity authentication and authorization functions of single sign-on system are realized by PKI/PMI,meanwhile,adopting agent based system model,the sign-on of users can be implemented by unified account while the old account/password system need not to be changed,thus the power enterprises' demand on network information security can be satisfied with as little as possible modification of application service program.The proposed single sign-on approach is available for reference in integrated manipulation of power enterprises and implementation of secure unified dispatching.