基于Kerberos协议的用户到用户认证系统的研究  

Research on Kerberos Protocol Based User-to-User Authentication System

作　　者：杨战海[1] 

机构地区：[1]延安大学计算中心,陕西延安716000

出　　处：《计算机技术与发展》2010年第10期180-183,188,共5页Computer Technology and Development

基　　金：陕西省科研计划项目(09BY37)

摘　　要：基于Kerberos协议的典型系统为单点登录身份认证系统,即单域身份认证系统,而关于用户到用户的身份认证系统,多采用NTLM协议。为了研究基于Kerberos协议的用户到用户认证系统,在充分研究Kerberos协议的体系结构和工作流程的基础上,对用户到用户的Kerberos身份认证系统的认证过程进行了详细的设计,分析了用户到用户的Kerberos身份认证系统的典型结构。研究表明,当一个客户端需要访问另一个客户端中运行的服务时,Kerberos身份认证协议支持在两个客户端之间的身份认证。Kerberos protocol based typical system is the single sign-on identity authentication system,namely,the single-domain identity authentication system, whereas,user-to-user identity authentication system mainly based on NTLM protocol.In order to research Kerberos protocol based user-to-user identity authentication system,detailed designs the authentication course of the Kerberos protocol based user-to-user identity authentication system and analyzes the typical structure of the Kerberos protocol based user-to-user identity authentication system on the basis of researching the architecture and workflow of the Kerberos protocol.The research shows that when a client-side needs access to the running service of another client-side,Kerberos protocol based identity authentication is applied to the identity authentication between the two client-sides.

关 键 词：身份认证 KERBEROS 密钥分发中心 认证服务器 单点登录 用户到用户 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]