基于Web Services多技术单点登录的研究与实现

为解决用户在访问多个不同的应用系统而需要进行多次登录认证的困扰,提出了单点登录技术。通过分析现有的单点登录模型的优缺点,结合Web service、Cookie及HTTP重定向等关键技术,提出了代理和经纪人模型,解决了统一身份认证和异步验证两大比较核心的问题。同时,由于HTTP重定向技术以及RSA加密技术的采用,使本系统在安全和性能上得到保障。

Research and Implementation of Single Sign-on for Multi-Technology Based on Web Services

To solve the problem of user repeated logon from various kinds of applications based on hybrid architecture and in different domains,a single sign-on architecture was proposed.On the basis of analyzing the advantages and disadvantages of existing single sign-on models,combined with the key technology like Web service,Cookie and HTTP redirects,two core problems such as unified identity authentication and asynchronous authentication were resolved.Meanwhile,the security and performance of this architecture were well guaranteed since the HTTP redirects and RSA encryption technology were adopted.The results show that this architecture is of high performance and it is widely applicable.