信息网络安全 ›› 2016, Vol. 16 ›› Issue (12): 81-85.doi: 10.3969/j.issn.1671-1122.2016.12.012

• • 上一篇    下一篇

统一身份认证和用户管理平台在集团型电力企业的应用

王静()   

  1. 国家电力投资集团公司,北京 100033
  • 收稿日期:2016-11-01 出版日期:2016-12-20 发布日期:2020-05-13
  • 作者简介:

    作者简介:王静(1973—),女,河南,高级工程师,硕士,主要研究方向为大型发电集团信息化管理与建设。

Application of the Unified Identity Authentication and User Management Platform in Electric Group Enterprise

Jing WANG()   

  1. State Power Investment Corporation, Beijing 100033, China
  • Received:2016-11-01 Online:2016-12-20 Published:2020-05-13

摘要:

电力行业网络与信息安全是国家网络安全的重中之重,为进一步提升集团型电力企业信息安全综合防护水平,确保企业信息系统安全运行,集团按照“统一设计、两级部署”的模式集中组织了统一身份认证和用户管理平台的部署和应用,通过三年建设、两年应用,实现了集团信息系统用户身份的可信标识、应用访问的可靠认证、用户信息的统一管理。作为基础技术平台,与诸多系统实现了接口集成,解决了应急登录和ERP安全加固等难点,并形成多项企业标准与规范。平台成为集团信息安全综合防护建设的关键组成部分,用户体验不断提升,使用效果良好。平台的应用使得信息系统建设满足相关法律法规对身份认证及数据保护方面的合规性要求,有效提升了集团信息安全管控能力。

关键词: 电力行业, 身份认证, 用户管理

Abstract:

The network and information security in the electric power industry is the top priority of national network security. In order to further improve the level of comprehensive protection of information security in electric group enterprises and ensure the safe operation of enterprise information systems, in accordance with the model of unified design and two-level deployment, the group finished deployment and application of the unified identity authentication and user management platform. Through three years of construction and two years of application, platform can achieve the identification of the Group Information System user, the reliable authentication of application access and unified management of user information. As the foundation technology platform, the platform and many systems have realized the interface integration, solved the difficult problems such as emergency login and ERP security reinforcement, and formed a number of enterprise standards. Platform has become a key component of the integrated information security construction of the group, and the user experience continues to improve. In this way, Information system construction can meet the requirements of the identity authentication and data protection compliance that relevant laws and regulations stated and thus enhance the Group's information security management and control capabilities.

Key words: electric group enterprise, identity authentication, user management

中图分类号: