联合身份认证及在校际资源网的应用  

Federated Identity Authentication and Its Application in Inter-college Network Resource

作　　者：刘维红 杭剑平 

机构地区：[1]浙江汇信科技有限公司,浙江杭州310005

出　　处：《信息安全与通信保密》2010年第1期126-129,共4页Information Security and Communications Privacy

摘　　要：随着联合身份认证技术的发展和成熟,在校际资源共享中遇到的用户管理和认证问题有了现实、可行、安全的解决方案。文中对现有的联合认证技术的发展进行研究,介绍了常见的身份认证的标准,分析SAML的特点和优势,总结了国内外校际资源共享发展应用的现状,介绍了两种基于SAML的开源产品OpenSSO和Shibboleth。另外,还分析了校际身份认证的特点和面临的问题,最后介绍了如何合理使用OpenSSO的联合认证技术来实现校际身份联合认证。Along with the development and mature of federated identity authentication technology, there are already realistic, practical and secure solutions for all the problems in the federated authentication technology. This article fo- cuses on the current technology of federated identity authentication, presents three most common standards of federated identity authentication, analyzes the features and advantages of open standard SAML including the current application of inter-college resource sharing network, and then describes 2 kinds of SAML-based open source implementations, that is, Opensso and Shibboleth. Finally, the article discusses the features and the problems faced in the implementation of feder- ated inter-college identity authentication, and it also gives how to use OpenSSO to solve these problems.

关 键 词：联合身份 OpenSSO SHIBBOLETH SAML OPENID CardSpace InfoCard 自由联盟 虚拟联合代理 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]