单点登录技术的研究

文章主要分析研究了基于B/S架构的单点登录模型的具体框架实现.作者着重分析了二个基于Kerberos认证系统模型的B/S架构变形的具体认证流程,并在此研究基础之上提出了跨越多个单点登录系统的一种联合认证的实现模型,并为此模型引入了认证域、认证主机域、联合认证域、联合认证主机域以及信任域等诸多概念.这种联合认证模型具有安全、灵活、实现简单、部署方便等诸多特点.尤其在该模型的安全性问题方面文中给出了重点分析.实现该联合认证模型可以解决凌驾多个单点登录系统之上的更高一个层面上的统一身份认证问题.

The Research of Single Sign-On Technology in Network

The article is mainly concerned with an analysis of the concrete structural realization through B/S-based Single Sign-On models. After analyzing two authentication processes of reformed B/S architecture based on Kerberos authentication system, the authors present a realization of Union Authentication model, which apply to many Single Sign-On system, and introduce such conceptions as authentication area, host-computer authentication area, union authentication area, host-computer union authentication area and credit area, giving a special focus on the safety of the model. Characterized by safety, flexibility, easy realization and deployment, this Union Authentication model achieves a unified identification authentication at a higher level, featuring many Single Sign-On systems.