基于令牌服务的跨域服务访问模型

Model of Cross-domain Service Access Based on Security Token Service

随着Internet的高速发展,安全互访问问题已经成为影响网络应用的重要因素。基于Web服务安全令牌服务模型,本文提出了一种跨异构安全域的服务访问模型,并重点阐述了原型实现的体系结构和服务运行架构。随后,讨论了实现跨域安全令牌服务过程中的两个关键技术,包括WS-Trust扩展实现的安全令牌定位机制以及通过定义令牌接入接口实现不同认证中心交互的抽象。最后,在网格互操作实验环境中,说明了该系统的易用性和可扩展性。

By popularizing the Internet,the problem of cross-domain service access has become crucial.A module of secured service is proposed to support access crossing heterogeneous regions based on web service security token service model.Also,the design principle of system architecture as well as service runtime mechanism is emphasized.Then two critical problems are discussed,including locating mechanism of security token by WS-Trust extension and defining interfaces of security token provider to abstract the varie...