基于PKI及单点登录实现跨信任域身份认证研究

Research on Cross-trust-domain Authentication Based on PKI and Single-pointSign-on

本文提出了一种通过单点登录来实现跨信任域身份认证的方法。文中设计了基于PKI的系统设计模型,以及强身份认证机制设计方案,并且提出了可信等级模块的初步设计。通过理论分析,通过此方法的实现,可以从用户角度大大提高用户访问效率,节省用户访问的时间,同时增强网络服务的安全性。

This paper provides a method to implement Cross-trust-domain authentication by single-point sign-on. I designed a system design model based on PKI and an authentication system design project. I also proposed a basic design of trust level model. Users' access efficiency can be greatly improved if this method is implemented. It is also proved by theory that the net service security can be enhanced while the access time is saved.