基于SAML的新型单点登陆模型研究  

Research of New Single Sign-on Model Based on SAML

作　　者：黄滨[1] 周德俭[1] 卫传征[1] 

机构地区：[1]桂林工学院,广西桂林541004

出　　处：《计算机技术与发展》2008年第9期219-221,共3页Computer Technology and Development

基　　金：广西自然科学基金(桂科基0575101);研究生教育创新项目(2007105960812M12)

摘　　要：随着互联网技术的发展和企业信息化建设的进步,用户在一次事务应用中,可能需要访问多个不同的应用系统,这需要用户在各个不同的应用系统中进行注册,这不但造成了系统的资源浪费,同时也增加了用户的工作量。单点登陆技术实现了用户一次性登陆后,即可进行无缝访问。SAML是一项基于XML的交换安全性信息的框架,结合SAML的单点登陆可以很好地实现信息的描述和信息的安全共享。讨论了单点登陆技术,在研究SAML技术规范与传统基于SAML的单点登陆技术的基础上,针对其存在的安全性、可靠性较差问题,引进CA认证技术,提出了一种新型单点登陆模式,提高了单点登陆的可靠性与安全性。With the development of Internet technology and the progress of information technology in enterprise, user may enter many different application systems to achieve one affair. In the case, user must register in many different application systems which not only cause waste of resources, but also increase the user＇ s work. SAML is a XML- based framework for exchanging security information. SAML - based SSO does well in the description and safe sharing in information. In this thesis, discuss the technology of single sign - on （SSO）. It is based on the research with SAML technical specifications and traditional SSO which is made of SAML. In view of the lack of safety and reliability, it develops a new mode of SSO to improve the reliability and security of SSO.

关 键 词：安全断言标记语言技术 断言 单点登陆 数字加密 数字签名 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]