文献类型：期刊文献

中文题名：单点登录技术的研究

英文题名：The Research of Single Sign-On Technology in Network

作者：戴芳胜[1];何守才[2];黄建华[1]

机构：[1]华东理工大学信息科学与工程学院计算机系,上海200237;[2]上海第二工业大学计算机与信息学院软件系,上海201209

年份：2005

卷号：22

期号：3

起止页码：25

中文期刊名：上海第二工业大学学报

外文期刊名：Journal of Shanghai Polytechnic University

语种：中文

中文关键词：统一身份认证;单点登录;网络安全;跨域认证;联合认证

外文关键词：uniform identity authentication; single sign-on; network security; span-domain authentication; union authentication

摘要：文章主要分析研究了基于B/S架构的单点登录模型的具体框架实现。作者着重分析了二个基于Kerberos认证系统模型的B/S架构变形的具体认证流程,并在此研究基础之上提出了跨越多个单点登录系统的一种联合认证的实现模型,并为此模型引入了认证域、认证主机域、联合认证域、联合认证主机域以及信任域等诸多概念。这种联合认证模型具有安全、灵活、实现简单、部署方便等诸多特点。尤其在该模型的安全性问题方面文中给出了重点分析。实现该联合认证模型可以解决凌驾多个单点登录系统之上的更高一个层面上的统一身份认证问题。
The article is mainly concerned with an analysis of the concrete structural realization through B/S-based Single Sign-On models. After analyzing two authentication processes of reformed B/S architecture based on Kerberos authentication system, the authors present a realization of Union Authentication model, which apply to many Single Sign-On system, and introduce such conceptions as authentication area, host-computer authentication area, union authentication area, host-computer union authentication area and credit area, giving a special focus on the safety of the model. Characterized by safety, flexibility, easy realization and deployment, this Union Authentication model achieves a unified identification authentication at a higher level, featuring many Single Sign-On systems.