一种基于Web单点登录系统实现.pdf

第 24 卷第 11期 计算机应用与软件 V o l24 No. 11 2007年 11月 Com puter A pplications and Sofwt are Nov. 2007 Web 陈 鹏 刁红军 朱 斐 ( 225300 ( 215006 介绍了一种基于W eb 的单点登录实现方法, 解决同一用户登录不同W eb 应用系 需要进行多次独立身份认证问题, 详 细讨论了单点登录系 中后台数据组织存储安全性以及代理认证服务处理逻辑同时, 就服务通信安全与服务响应时间之间的矛 盾问题提出了一种解决的方法W eb代理采用浏览器插件方式, 截获用户第一次登录某个W eb 应用时的 post 数据, 并将其存入数 据库, 用户在以后登录这个W eb 应用系 时自动提取数据库中 post数据, 省去了用户手动进行身份认证的过程, 实现了 一身份认 证 单点登录 IE插件 W eb Serv ice AWEBBASED SYSTEM OF SINGLE SIGNON 1 2 2 Chen P eng D iao H ongjun Zhu Fe i 1 (D epartment of D istance Learning, Taizhou Teachers College, Taizhou 225300, Jiangsu, China) 2 (School of Computer ngineering, Soochow University, Suzhou 215006, Jiangsu, China) Abstract A W ebbased approach to sing le signon is described to so lve the problem of separate identity author ization w hen a u ser log s in d ifferen tW eb app lication system s. Back end data structure and storage security issue o f sing le signon system are gone into, and the process ing log ic o f au thor ization proxy server is discu ssed as w e ll. A t the sam e tmi e an approach is proposed to so lve the contrad ic tion betw een serv ice comm un ica tion secur ity and serv ice response tmi e. IE p lugin is applied to cap ture u sers post data of f irst signon, and store the data. W hen the u se r logs in theW eb applica tion system again, the users post data is distilled au tom atica lly from da tabase, w h ich e lmi inates m anua l identity au thor ization. T hu s, unified identity authoriza tion is rea lized. K eywords S ing le s ignon IE p lugin W eb serv ice , POST