云服务中跨安全域的联合身份认证技术分析  

Analysis of Federation Identity Authentication across Security Domains in Cloud Service

作　　者：周君平 孔德新[1] 付伟[1] 杜佳颖[1] 

机构地区：[1]北京国富安电子商务安全认证有限公司,北京100176

出　　处：《信息安全与通信保密》2012年第11期89-90,94,共3页Information Security and Communications Privacy

摘　　要：针对云服务中众多服务资源的安全有效登录问题,提出跨安全域的联合身份认证。首先,为保障用户身份信息的安全性,采用SAML2.0技术规范,建立安全域实现不同安全域下用户身份的鉴别和信息的交换;其次,为保障信息交换的安全性,使用SSL安全链路进行通信,以确保信息的完整性和机密性。该设计实现了对云服务中用户登录信息跨域的有效验证,提高了资源访问的安全性。For the secure and effective login on many service resources in the cloud,this paper proposes a federation identity authentication across security domains,and in order to protect user identity information,SAML 2.0 technical specifications is adopted,thus to establish security domain and realize the user identity authentication and information exchange in among the different domains. Then,in order to protect the security of information exchange,SSL secure link is used to transfer information and thus ensure information integrity and privacy. The solution can effectively verify user＇s login information across different domains and improve the security of resources-access in the cloud.

关 键 词：云服务 安全域 联合身份认证 SAML 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]