| Web环境下的SSO实现模式的研究 |
| |
| 引用本文： | 张挺,耿继秀. Web环境下的SSO实现模式的研究[J]. 计算机仿真, 2005, 22(8): 128-131 |
| |
| 作者姓名： | 张挺 耿继秀 |
| |
| 作者单位： | 中国科学技术大学研究生院,北京,100039;中国科学技术大学研究生院,北京,100039 |
| |
| 摘 要： | 针对单点登录（SSO）这一传统难题，该文分析比较了各种SSO设计模型的优缺点，利用Web应用这一关键技术，给出了面向Web应用的SSO系统设计方案。该文描述了面向Web应用的SSO系统的设计思想、体系结构以及各个模块的功能和模块之间的关系和交互，详细设计了SSO Gateway、SSO Agent、SSO Auth等三个重要模块。该文创新地结合J2EE Web应用、Web service、JAAS等成熟的技术，为解决单点登录这个安全集成领域中的核心问题之一，设计了一个完整的、可行的、先进的实现方案。读者可以在该文的指导下，结合自身实际情况较为容易地改造现有应用系统，真正实现单点登录的集成。
|
| 关 键 词： | 单点登录 认证 互联网应用 |
| 文章编号： | 1006-9348(2005)08-0128-04 |
| 修稿时间： | 2005-06-13 |
Research and Design of Web-based SSO System |
| |
| ZHANG Ting,GENG Ji-xiu. Research and Design of Web-based SSO System[J]. Computer Simulation, 2005, 22(8): 128-131 |
| |
| Authors: | ZHANG Ting GENG Ji-xiu |
| |
| Abstract: | Single Sign-On is a traditional hard problem. This paper compared with kinds of SSO design models and analyzed the key technology of web applications. Then it brought up a SSO system design solution for web environment. The paper described the web oriented SSO system design strategy, architecture, the most important modules and interactions between them. It designed the SSO gateway module, agent module and authenticator module. The essay innovated the design of SSO system and combined it with many technologies like J2EE Web applications, web service and JAAS. It provided an integrated, feasible and advanced SSO design solution and it is also a design principle which makes it easy to reconstruct legacy system's security function to implement a real single sign-on environment. |
| |
| Keywords: | Single sign-on(SSO) Authentication Web application |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
