知识共享平台建设中统一身份验证的设计与应用

Design and Application of an Uniform Identity Authentication System for Building Knowledge Sharing Platform

文章分析了统一身份认证系统在知识共享平台建设中的必要性,提出了该系统总体框架。针对用户单点登录给出了一种利用安全声明标记语言(SAML)描述,基于kerberos协议的身份认证体系结构,同时,利用分布式目录树结构开发了用户身份和权限统一管理系统。在实现知识共享的同时,保证了资源的安全访问,提高了系统的使用效率。

This paper investigates the importance of uniform identity authentication system for building knowledge sharing platform, and presents the general framework of this system. An architecture based on kerberos Protocol and Security Assertion Markup Language is used to solve the issue of the Single User Sign-on to Multiple Services. This paper also discusses the issue of organizing user＇ s id and access control lists with the distributed directory tree method, and a real application model is presented. This system can provide a very effective and secure access on knowledge sharing system.