基于Kerberos委派的多应用系统单点登录机制的研究

Research on Single-Sign-On Mechanism of Multiuse Systems Based on Kerberos Delegation

分析了单点登录的概念和Kerberos协议的工作原理,根据Kerberos5授权数据的功能,提出了基于委派的单点登录,很好地解决了传统认证机制存在的问题,保证了系统的安全性和易用性。

This paper analyzes the SSO （Single Sign On） concept and the principle of Kerberos protocol, and puts forward the SSO based on delegation according to the functions of authorization data. This system resolves the problems of traditional authentication mechanism, and guarantees its security and easy use.