Search

Diplomsko delo se nanaša na področje varnosti gesel, njihovo izbiro in upravljanje z njimi. Predstavili smo obstoječe sisteme za upravljanje z gesli in jih primerjali med seboj. Izdelali smo spletni sistem za upravljanje z gesli in pripadajočo mobilno aplikacijo Android, ju opisali in razložili potek razvoja. Na kratko smo opisali metode za kriptiranje in v projektu uporabljene tehnologije. Ugotovili smo, da je uporaba sistema za upravljanje z gesli uporabnikom v pomoč, saj izboljša varnost in preprečuje pozabo gesel. The thesis addresses the area of security passwords, their selection and management. In the work we presented existing systems for password management and compared them with each other. We made an online system for password management and a corresponding mobile Android application – we described them and explained their course of development. We briefly described methods for encryption and the used technologies in the project. We have found that the use of a system for managing passwords is helpful to users, as they improve the safety of other passwords and avoid forgetting them.

Naloga obravnava vpeljavo sistema enotne prijave v konkretno organizacijo. Zaradi velikega števila uporabnikov in aplikacij je upravljanje z gesli zapleteno tako za uporabnike kot tudi za upravljavce sistema. Varnost informacijskih sistemov v konkretnem primeru temelji na kakovosti gesel, zato jih je potrebno v nekaterih aplikacijah periodično menjati. Uporabniki najpogosteje določijo enostavna gesla, ki pa z varnostnega vidika predstavljajo grožnjo za informacijske dobrine organizacije. Kadar jih aplikacija ne prisili v določitev različnih gesel, uporabniki najpogosteje obdržijo obstoječe. Če uporabniki ne zamenjajo pravočasno gesla, mora to namesto njih izvesti upravljavec sistema. Izboljšavo varnosti, racionalizacijo porabe časa in nižje stroške delovanja informacijskih sistemov omogoča vpeljava sistema enotne prijave. V nalogi je analizirano obstoječe stanje, definirane pa so tudi funkcionalne zahteve za sistem enotne prijave. Kratko so opisani različni produkti, ki omogočajo enotno prijavo. Koncipiran je projekt uvedbe sistema enotne prijave ob predpostavki, da je izbrani produkt IBM Tivoli Access Manager for Enterprise Single Sign-On. Konceptualno so razviti procesi in modeli upravljanja z gesli. This research explores Single Sign-On solution and its deployment into a particular organization. Password management in a medium-sized organization represents a challenge for both users and administrators due to numerous applications. In the particular case, security of information system is based on the password quality and for this reason they need to be changed periodically. Users often set simple passwords which pose a threat for the information system resources. They are reluctant to change their passwords unless an application forces them otherwise. Unless users change their passwords on time, system administrator performs the task on their behalf. Deployment of Single Sign-On solution improves security, reduces time and costs related to managing of the information system. Function analysis of existing password management is performed along with functional requirements for Single Sign-On solution. Several products that offer Single Sign-On are briefly described. The proposed project is based on the selected product - IBM Tivoli Access Manager for Enterprise Single Sin-On (TAM-ESSO). Procedures and models of user password management are developed.