基於階層式存取控制的單一簽入入口網站之建置與設計

Design and Implementation of a Single Sign-On Portal with Hierarchy Access Control

江岳霖(Yue-Lin Jiang)

指導教授 ： 陳英一

中原大學/工學院/電子工程研究所/碩士(2005年)

https://doi.org/10.6840/cycu200500486

摘要

越來越多的企業架設入口網站，而web-based 的網路服務其內容變得豐富且多樣但隨著應用服務增加而日益複雜的網站結構，造成使用者無法有效率的瀏覽資訊與使用服務，所以如何提供單一、統合的入口，讓使用者能透過此入口得到其所需的應用服務與資訊，是完善入口網站所需討論的議題。
在普及運算的企業環境下建立一個低管理成本、高彈性、和高可靠性的單一簽入入口網站是本研究的重點。本研究主要的目在於Web-based 應用系統的介面整合，所謂的介面整合, 最基本應達到「單一登入」、「權限整合」與「使用者介面整合」等三大要求,因此，運用軟體元件的設計觀念與網路服務(Web Services)的技術遂成為上述所遭遇需求的解答。本研究將三層式架構中網路應用程式前端的表現層以Portlet 應用程式介面(Application Program Interface, API)、Portlet JavaServer Page Custom Tag 及延伸性標籤語言(Extensible Markup Language, XML)技術，開發可鑲嵌於入口網站伺服器(Portal Server)的應用服務元件-Portlet。以EJB、網路服務與訊息佇列技術，設計整合其它應用系統的連接元件。Portal伺服器與應用程式伺服器使用認證代理伺服器做為統一的認證機制，達成單一簽入的優越融合。
此技術模式有效降低企業資訊入口網站系統的開發、管理，與維護成本，實現應用服務快速整合與資源有效利用的目標。

關鍵字

入口網站 ； 存取控制 ； 單一簽入 ； Portlet

並列摘要

More and more enterprises build up the Enterprise Information Portals, and the abundant and various Web-based Internet services make the structure of web sites complicatedly. It makes users to browse and apply the services inefficiently. This thesis presents a complete portal site which provides the capability of Single-Sign-on.
The key point of this thesis is to establish a low cost and high elasticity in the popularization operation enterprise environment. The main item of this research is integrated of user interface in the Web-based application system. It means the system should achieve " Single Sign-On ", " Integrated of user interface " and " Integrated of access control ".
Therefore, Using software design pattern and Web Services the technology then becomes above encounters the demand the explanation. This research implements the presentation layer of the web application with Portlet Application Programming Interface, Portlet Java Server Page Custom Tag and Extensible Markup Language (XML) technology. Portal server and the application server use authentication proxy server for the unified authentication mechanism, and achieves superior fusion which solely records.
The enterprise expects to establish the portal system that integrates diverse information and business processes with safety functions. Through this integrated portal, users satisfied with their needs for personalized information and services and thus promote the effective use of business resources and overall productivity.

並列關鍵字

Single Sign-On ； Portlet ； Access Control ； Portal

參考文獻

【1】 Mdhdi Jazayeri, "Component Programming-a fresh look at software component", p.456-p.474, 5th European Software Engineering Conference, 1995, Proceedings.

【2】 Andrea Bagnasco, Marco Chirico, Ann Marina Scapolla, "XML Technologies to Design Didactical Distributed Measurement Laboratories", p.651-p.655, Instrumentation and Measurement Technology Conference, 2002. IMTC/2002. Proceedings of the 19th IEEE, Volume 1, 2002.

【6】 Ricardo Chalmeta, Christina Campos, Reyes Grangel. “References architectures for enterprise integration.”, The Journal of Systems and Software 57 , P175–191 (2001).

【16】 Web Services Description Language (WSDL), http://www.w3.org/TR/wsdl12/, visited on 03/2002

【22】 Der-Ming Liou, Ean-Wen Huang, Tsong-Tai Chen, Sheng-Hsiung Hsiao, "Design and implementation of a Web-based HL7 validation system", p.347-p.352, Information Technology Applications in Biomedicine, 2000. Proceedings. 2000 IEEE EMBS International Conference on , 9-10 Nov. 2000.