铁路信息系统用户身份自动化管理及关键技术研究

铁路信息系统网络架构复杂、业务数据量巨大、系统关联交错，用户身份信息管理长期存在账号信息易泄露、账号违规提权、账号共享等安全风险。通过研究信息自动化管理技术，设计了用户身份自动化管理系统，实现对用户身份信息的自动检测、自动修改密码与验证、自动推送、安全备份、威胁分析检测等功能，解决铁路运行维护单位在用户身份管理过程中的问题和困难，更全面地管理和保护各类资源的身份凭证，避免因用户身份信息管理不当，造成资源信息泄漏或被滥用，降低用户身份相关数据安全事故的发生概率。

Automatic management and key technologies of user identity in railway information system

The network architecture of the railway information system is complex, the volume of business data is huge, and the system is interconnected. There are chronic security risks in the management of user identity information, such as easy disclosure of account information, illegal withdrawal of account rights and account sharing. By studying information automatic management technology, this paper designed the user identity automatic management system, implemented the functions of automatic detection, automatic password change and verification, automatic push, security backup, threat analysis and detection of user identity information of user identity information, solved the problem and difficulties of railway operation management departments in the process of user identity management, more comprehensively managed and protected the identity certificates of various types of resources, avoided resources information leakage or abuse due to improper management of user identity information, reduced the probability of data security accidents with user identity.