With the continuous development of the mobile communication industry, market competition is fierce, the mobile communication field is also in urgent need to establish a set of architecture on the Internet network office system, in order to improve the level of office and management. More importantly, the ability of the remote office, the rapid increase in the market reaction capacity of mobile communications business is an important prerequisite and protection.
Sichuan Mobile Communication Co., Ltd. office network of the second phase of the project is set up in the future, faced with the problem of upgrading and transformation of the next step, they want by setting the web portal, for the company's internal staff can anytime, anywhere access to internal office network and document processing.
　　
Urgent need for mobile office
Due to the second phase project of Sichuan Mobile Communication Company office network to establish a corporate intranet to cover only the city level, there is no link the suburban Bureau, but suburban Bureau and the need to access enterprise office network. Therefore, it is necessary to have access to a suburban office network solutions, and for people going out for business to want to visit office network, if accessed by dialing mode, not only access to slow, and the operation is complex and the cost is high. In order to solve the around the city, the state of mobile Branch District, County Bureau of office, the formation of a truly covers the province of Sichuan Mobile Communication Company office platform, the company's mobile office issues have become increasingly prominent. In this paper, the second phase of expansion problem.
But the problem is not so simple. Although the traditional local area network function is perfect, but there is no foreign export. And once you want to be able to successfully access the local office of the local area network, it is necessary to establish a suitable portal in order to access. The most critical is that this portal site because it is located on the Internet, but also to be connected with the local area network, security issues must be guaranteed.
　　
Dual authentication and security
Based on this demand, Sichuan Mobile Communication Company enterprise user portal is proposed using the sun one portal server, traditional OA system architecture on the Internet, expanding the application scope, to realize the combination of the dynamic password and wireless communication.
Sun one portal server supports multiple authentication methods, including simple UNIX, web form, cookies, LDAP, X.509 digital certificate, Sichuan Mobile can according to the needs, combined with their own actual situation to choose appropriate authentication method, the system provides a complete PKI digital certificate management system. When Sichuan Mobile employees access to the portal, through the identity authentication, between the browser and the server established a pathway through the SSL encrypted, and all data transfer will be completed on this pathway. All data transmission in the Internet is encrypted, and its encryption strength can be set to 128 or 40 bit encryption mode according to the need of system efficiency.
Throughout the two phase of the project to use the Sun package, including Sun high performance Unix servers, workstations and ONE Portal Server Sun software, which ONE Portal Server Sun software system is the core of the package. According to the design, the client does not need to install any software, the use of the browser can solve the problem, the greatest degree of convenience to the user. In addition, in the future, Sichuan mobile employees can even visit this portal to achieve more additional features, such as online ordering, etc..
Sichuan mobile introduction, when this solution was introduced to us, we have three most satisfied places. One is its security. Our most valuable resource is our employees and data, it is necessary to ensure that the employee can secure access to the internal network, but also to ensure internal network information are intact, this system use PKI and LDAP technology to manage large-scale user personalized information service and provide network secure transmission of information to the X.509 digital certificate generation \/ management system, leave a good tool for our security and verification; the second is its integrated function. The system can provide information gathering, knowledge management and personalized service, for our different staff provides different services. In addition, this personalized service for our system upgrade leave the interface; the third is the mature e-commerce. The program can establish a digital electronic market, enterprise online procurement, sales and so on, which for the future of our online procurement, online decision-making has laid a good foundation. To tell the truth, the system fully meet our fancy security and scalability needs, which prompted us to choose the ONE Sun, chose the ONE Portal Server Sun. "
Thus, from the beginning of October 2001, Sichuan Mobile Company first established the a portal Server-- portal gateway and portal server is composed of two parts, which the portal gateway responsible for mobile office between the data encryption (is established between the user and the SSL); portal server portal is the main entity, being all of Sichuan mobile employee information and domain settings, such as portal setup information. When suburban counties Bureau or Sichuan Mobile employees travel abroad to mobile office, regardless of when and where can through the browser into the interface, the first to visit the portal server, through the portal server authentication, and with the portal server set up SSL, and then through the portal server to access the OA server, so that the user and server OA between established secure communication. At the same time, mobile users to enter the OA system before the need for authentication. In this way, the two identity authentication, to ensure the safety of the entire Sichuan mobile internal office network.
For Sichuan mobile internal office network, as a result of mobile office users to access the OA system, the first access to the portal, and the OA server is not exposed to the Internet users, to ensure that the OA system is not subject to hacker attacks.
Of course, not only the Sichuan mobile Sun ONE Portal Server to enjoy the use of the browser on the client, without installing any software management and configuration, also do not need to use any plug-in in the LAN Web server, can save a lot of trouble; verification system using the existing enterprises, prevent the inconsistency due to system verification; Sun ONE Portal Server can use the domain and role and to achieve a unified user management, Sichuan mobile login and through the verification, Portal will automatically connect to the server for this connection, although Sichuan Mobile has multiple OA servers are different areas of service, but as a unified interface cities and counties to achieve mobile access, each mobile staff, no matter where you are, see the interface is the same.
　　
Significant effect
Because Server Portal software on the hardware system requirements are not high - dual CPU can be, so for the Sichuan mobile most economical to solve the problem of mobile office. At the same time, the system can also provide many other content services, such as employees in the business trip to visit some of the site, check email, etc..
To now mobile communication company office work, for example, used to send important internal documents, need to print and fax to the county level departments, then call to confirm the receipt, for travel in the field staff, even can not be timely communication, so office worker for very complex, occasionally there are omissions. Now, they only put the file successfully on the LAN, at or above the county level of the user through the portal into the LAN nature can see the file, travel outside, also can at any time for a working visit and query, greatly improves the efficiency and accuracy.
At present, Sichuan mobile rely on their own advantages, in the ONE Portal Server API JAVA Sun developed a dynamic password access capabilities, and mobile phone SMS platform. So when the office staff to login to the portal server, system will be randomly generated password, by recording in the sun one portal server the user's phone number, the use of mobile phone text messages will be password is sent to the user's mobile phone, the whole process only need about 2 seconds. Through dynamic password access, greatly improving the reliability of the whole system, for the future of Sichuan Mobile Communications Co., Ltd. to carry out the rich mobile value-added services to provide a scientific platform. At the same time, through the sun one portal server SMS platform, when employees of Sichuan Mobile Communication Co., Ltd. the new files and work to deal with, the system will automatically send text messages to give him tips, make work more timely, more rational.
Sichuan Mobile company thought to himself, "by sun one portal server, we establish the covering Sichuan office system, not only makes documents, and the production and business operation statements can timely and report and architecture of the unified platform, greatly improves the production efficiency of enterprises, improve the market competition ability of the enterprise. "