基于消息系统的可定制单点登出服务的设计与实现  

The Design and Implementation of Message System-based and Customizable Single Sign Out Service

作　　者：张靖宇[1] 李志蜀[1] 陈良银[1] 邢建川[1] 李宝林[1] 李清[1] 

机构地区：[1]四川大学计算机学院,四川成都610064

出　　处：《四川大学学报（工程科学版）》2007年第5期137-142,共6页Journal of Sichuan University (Engineering Science Edition)

基　　金：四川省重点项目(05GG021-003-2);四川大学计算机学院(软件学院)青年基金资助项目

摘　　要：在多个系统间如何进行身份认证和授权是企业在部署应用集成系统时面临的问题之一。现有的SSO(单点登录)认证模型为多应用集成系统提供了统一的认证入口,但是该模型面临另一个影响系统安全性的问题:单点登出的认证管理。本文提出的单点登出认证模型MSC-SSOS(Message System-based and Customizable Single Sign OutService)基于Java Message Service消息机制,通过设计消息总线集中完成安全管理,业务定制,消息持久以及负载均衡多种服务。并将耶鲁大学SSO登入认证模型——CAS与模型MSC-SSOS进行整合,应用于在线服务系统,在每日访问量超过400000 Pages的在线系统中展示了其安全、稳定、高效的特点。Single Sign On （SSO） provides uniform authentication entrance for multi-application integration system, but has a security issue on which it normally does not focus- authentication management in Single Sign Out. A Message System-based and Customizable Single Sign Out Service -MSC-SSOS integrating Yale ITS CAS into a multi-application online service system, was designed and implemented. Many services such as security manage- ment, business customization, message persistency and balance loading are orovided through a message bus. MSCSSOS demonstrates characteristics of security, stability and efficiency in the online system which is visited by more than 400000 pages a day.

关 键 词：单点登录 单点登出 CAS MSC-SSOS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]