一种分布式系统的用户认证授权机制及其应用

An Authentication and Authorization Scheme for Distributed System and Its Application

针对用户认证和授权问题提出了一种对用户集中认证、分散授权的解决方案。通过借鉴网格环境中的虚拟社区授权服务的体系结构,构造了统一身份认证和资源访问控制的系统框架,并实现了单点登录、细粒度用户访问控制的安全机制,对该方案的安全性进行了评价。

Based on the security requirement project, a concentrated authentication, distributed authorization solution, which is based on the community authorization service model of grid architecture, is proposed. A unified identity authentication and resource access control is described, and the single-sign-on, fine-grained access control features for the system are fulfilled. Finally, a security analysis of the proposed scheme is given.