基于安全断言标记语言实现单点登陆  

Single sign-on model based on security assertion markup language

作　　者：武文丽[1] 黄永忠[1] 陈海勇[1] 

机构地区：[1]信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与设计》2007年第4期785-788,共4页Computer Engineering and Design

基　　金：国防基金项目(BP200301036)

摘　　要：单点登录(single sign-on,SSO)作为一种为解决传统认证机制所存在的问题而提出的技术,已成为分布式系统研究的热点之一。对当前流行的安全断言标记语言(SAML)提供的两种单点登陆模型Artifact和Post进行介绍分析,指出它们存在的不足。针对其局限性,引入了凭证和准凭证的概念,提出了一种改进的基于SAML的单点登陆模型并以实现。最后对该模型的性能进行了分析。SSO （single sign-on） has been the research hotspot in distributed system, which is a technology introduced to resolve the problems of traditional authentication. Two single sign-on models are introduced： Artifact and post, which is provided by security assertion markup language （SAML）. By analysis the limitation of two models is pointed out. In order to make some improvement to these flaws, two concepts： Pass and quasi-pass are brought in. Under the two principles, an improved SSO model based on SAML is proposed and implemented. At last, the performance of new model is analyzed.

关 键 词：单点登录 安全断言标记语言 断言 凭证 准凭证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP31[自动化与计算机技术—计算机科学与技术]