【摘要】 该文针对W eb环境中应用Kerberos认证协议存在的两个问题,提出了自己的解决方案。采用基于随机数的质询/响应方式取代基于时间的A uthenticator来解决重放攻击问题,采用Secure Cookies、H ttpSession等来解决W eb环境下服务器间和服务器内的安全会话问题。在此基础上设计并实现了面向W eb应用环境的单点登录系统Ti-SSO。更多还原

【Abstract】 This paper presents a single sign-on system named Ti-SSO for web applications,which solves two main problems of applying Kerberos in the web environment.It adopts the random-based request/response method instead of the time-based authenticator to resolve the replay attack problem,and adopts secure cookies and HttpSession to keep secure sessions between and in the web servers.更多还原