摘要
文章分析了统一身份认证系统在知识共享平台建设中的必要性,提出了该系统总体框架。针对用户单点登录给出了一种利用安全声明标记语言(SAML)描述,基于kerberos协议的身份认证体系结构,同时,利用分布式目录树结构开发了用户身份和权限统一管理系统。在实现知识共享的同时,保证了资源的安全访问,提高了系统的使用效率。
This paper investigates the importance of uniform identity authentication system for building knowledge sharing platform, and presents the general framework of this system. An architecture based on kerberos Protocol and Security Assertion Markup Language is used to solve the issue of the Single User Sign-on to Multiple Services. This paper also discusses the issue of organizing user' s id and access control lists with the distributed directory tree method, and a real application model is presented. This system can provide a very effective and secure access on knowledge sharing system.
出处
《微计算机信息》
北大核心
2005年第11X期1-3,148,共4页
Control & Automation
基金
自然科学基金:70202008
关键词
身份认证
知识共享
单点登录
用户管理
Authentication, knowledge sharing,single sign_on,Client Credential Management