关键词: OAuth2.1协议, 认证, 授权, 单点登录, 安全风险检测, 访问控制

Abstract: With the development of enterprise informatization, there are more and more applications within the enterprise. To make better the access control management of applications in the enterprise, and users can access all the applications which are authorized after logging in once, it is essential to establish a unified, effective and secure authentication and authorization system. On the basis of studying the OAuth2.1 protocol, the paper proposes an OAuth2.1based unified authentication and authorization framework. The framework includes three aspects: authentication, authorization, and security design. The framework includes five functional modules: userapplication authentication, OAuth2.1 authorization, userapplication data management, authority management, and security risk detection. The feasibility and safety of the framework are analyzed. The results of the research are shown that the framework better reflects the need of establishing a unified, effective, and safe authentication and authorization system within the enterprise, and the framework has a wide range of practical guiding significance and value for the rapid establishment of a unified authentication and authorization system within the enterprise.

Key words: OAuth2.1 protocol, authentication, authorization, single signon, security risk detection, access control ,