基于证书的多域多系统身份认证设计与实现  

Design and implementation of multi-domain and multi-system identity authentication based on certificate

作　　者：张春瑞[1] 任鹏[2] 

机构地区：[1]中国工程物理研究院计算机应用研究所,四川绵阳621900 [2]中国工程物理研究院化工材料研究所,四川绵阳621900

出　　处：《计算机工程与设计》2009年第18期4195-4198,共4页Computer Engineering and Design

基　　金：中国工程物理研究院科学技术重大基金项目(2006Z0604)

摘　　要：在工程仿真环境中,管理员需要对不同域和系统中的用户管理及身份认证方式进行统一,提高身份认证的安全性、可靠性。提出使用数字证书作为认证方式,设计并实现了基于数字证书的多域多系统下的统一身份认证。应用结果表明,用户使用存储于USBKey中的同一张数字证书就可以本地或远程访问不同域和环境中的资源。因此,不仅管理员可以对不同环境下的账户进行统一管理,而且增强了用户使用的易用性和身份认证的安全性。In engineering and emulate environment, administrators often need to unify accounts management and identity authentication within different domain and system. They also need to increase security and reliability of identity authentication. A new method is presented, which uses digital certificate as the way of authentication. Unified identity authentication is designed and implemented in multi- domain and multi-system. Application result indicates that using same certificate stored in USBkey users can access resource by local or remote logon which belong to different domain and system. Accordingly not only administrators can uniformly manage all the accounts with several domains but also it improves application security and workability.

关 键 词：数字证书 安全域 本地登录 远程登录 统一身份认证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]