Shibboleth与CALIS统一认证云服务中心的跨域认证集成模式  

Federated Authentication Model between Shibboleth and CALIS Unified Authentication Cloud Service Center

作　　者：王文清[1] 柴丽娜[2] 陈萍[3] 吕洁[3] 

机构地区：[1]北京大学CALIS管理中心 [2]北京大学CALIS技术中心 [3]北京大学计算中心网络室

出　　处：《国家图书馆学刊》2015年第4期45-50,共6页Journal of The National Library of China

基　　金：国家发展改革委2011年国家信息安全专项“基于可信身份联盟和云计算的数字资源安全防护服务”研究成果之一

摘　　要：为解决高校图书馆国外电子资源数据库跨域身份认证问题,并为馆际资源共享和协同服务提供统一的身份认证基础,CALIS、CARSI和DRAA联合推出基于Shibboleth的跨域身份认证服务。本文首先介绍Shibboleth技术、高校身份认证联盟CARSI以及面向高校图书馆的CALIS统一认证云服务,详细阐述了Shibboleth与CALIS的跨域认证集成总体架构、CARSI IdP部署方式和图书馆门户改造方案,最后介绍了CALIS-CARSI认证服务内容以及在高校图书馆中的应用情况。图4。参考文献4。To address problems of federated authentication for foreign digital resources databases of academic li- braries as well as provide a unified basis on identity authentication for resource-sharing and collaboration be- tween libraries, CALIS, CARSI and DRAA jointly establish federated authentication service based on Shibbo- leth. This paper first analyzes technologies of Shibboleth, CARSI consortia and CALIS unified authentication cloud service, then elaborates the solution of integration between Shibboleth mqd CALLS unified authentication cloud service, and expounds the deployment of CARSI IdP and the reform project of library portals. At last, the CALIS-CARSI＇s service and its application are discussed. 4 figs. 4 refs.

关 键 词：CALIS CARSI SHIBBOLETH 统一认证 跨域认证 

分 类 号：G250.7[文化科学—图书馆学] G258.6