【摘要】 为了解决现有基于Kerberos协议及证书机制的单点登录系统的不足,结合了Kerberos协议和证书机制的思想,提出了改进的单点登录方案。改进方案不仅解决了Kerberos协议单点失效问题以及证书机制认证低效问题,同时还给出了用户信息管理中心防数据外泄方案以及单点登录系统防DDos攻击策略,从而保证了整个改进方案具有较好的安全性、高效性和可靠性。目前,基于改进方案的单点登录系统已经实现并且成功应用在面向服务架构的Web Service环境下。更多还原

【Abstract】 In order to resolve the shortage of SSO(single sign-on) system based on Kerberos protocol or certificate mechanism,an improved SSO scheme,which combined the method of Kerberos and certification techniques,is put forward. The scheme not only solves single point failure problem in Kerberos technique and inefficient problem in certification technique,but also provides a new method to protect data of user management center and prevent DDos(distributed denial of Service) attack,as a result,the scheme is good at security,efficiency and reliably. Presently,a SSO system based on the improved scheme is realized,and is applied in the web service environment of service oriented architecture.更多还原