基于PAC的Kerberos认证授权机制研究与改进  

Research and Design of Kerberos in authentication and authorization mechanisms

作　　者：元智博 王慧丽[1] 张健[1] 池亚平[1] 

机构地区：[1]北京电子科技学院,北京100070

出　　处：《北京电子科技学院学报》2015年第2期28-33,共6页Journal of Beijing Electronic Science And Technology Institute

基　　金：中央高校基本科研业务费资助(项目编号:328201537)

摘　　要：Kerberos是在开放网络环境中广泛使用的安全认证协议。近年来,对Kerberos协议的研究大多集中于如何提高其认证流程的安全性。本文在对Kerberos协议原有理论及流程分析的基础上,通过一种轻量级的特权属性证书(Privilege Attribute Certificate,PAC),为Kerberos协议提供了一种授权扩展的方案。并针对跨域访问中的授权问题,提出一种基于PAC的授权方案。Kerberos is one of secure authentication protocol which is widely used in open network environment. Recently, Most of the research about Kerberos were on how to improve the security of the certification process. Based on the analysis of the original theories and process of Kerberos, this paper improves Kerberos protocol extended in authorization with a light privilege attribute certificate. And aiming at the issue of authorization in cross-realm access, puts forward a solution of authorization based on PAC.

关 键 词：PAC KERBEROS 认证 授权 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]