无侵入式Web平台集成自动认证机制的设计与实现  

Design and Implementation of Non-intrusive Automatic Authentication Mechanism in Web Platform Integration

作　　者：邵瑛[1] 徐斌 SHAO Ying;XU Bin(School of Electronic Technology and Engineering,Shanghai Technical Institute of Electronics and Information,Shanghai 20141l,China;Fix Network Business Group,Nokia Shanghai Bell,Shanghai 201206,China)

机构地区：[1]上海电子信息职业技术学院,电子技术与工程学院,上海201411 [2]上海诺基亚贝尔,固网事业部,上海201206

出　　处：《微型电脑应用》2023年第8期5-8,共4页Microcomputer Applications

基　　金：中国高校产学研科创新基金(2020HYB01003)。

摘　　要：单点登录是多Web平台集成时常用的统一认证方案,它对Web平台是侵入式的,需要各Web平台在代码上的支持,不适合已经成型的系统。针对该问题提出了一种无侵入式的第三方Web平台自动认证机制,该机制基于私有域名,采用认证代理适配器实现后端Web平台的域名绑定及登录认证。为实现认证过程中私有域名的自动解析,提出基于Web的动态私有域名机制,避免客户端需频繁手动修改Hosts文件来解析私有域名的问题。提出的无侵入式自动认证机制具有广泛的实用性。Single sign on(SSO)is a common unified authentication scheme used in the integration of multiple Web platforms,it is intrusive to the Web platform,needs the code support,and is not suitable for the formed system.To solve this problem,a non-intrusive automatic authentication mechanism for the third-party Web management platform is proposed.Based on the private domain name,the mechanism uses the authentication proxy adapter to realize the domain name binding and login authentication of the back-end Web platform.In order to realize the automatic resolution of private domain name in the authentication process,a dynamic private domain name mechanism based on Web is proposed,which avoids the problem that the client needs to frequently manually modify the Hosts file to resolve the private domain name.The proposed non-intrusive authentication mechanism has wide practicability.

关 键 词：WEB平台 域名 自动认证 认证代理适配器 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]