电子政务中基于SAML的信任与授权服务系统设计

SAML-based Trust and Authorization System Under E-Government

介绍了SAML的主要特点,包括声明类型和SAML的标准体系结构,以及SAML在电子政务建设中的应用。针对目前电子政务系统中信任与授权服务是保障信息安全的重要基础设施,结合SAML的标准体系结构,提出了电子政务中基于SAML的信任与授权系统的设计框架,并对此系统中基于SAML的授权机制的实现进行了分析。

This paper introduced SAML （Security Assertions Markup Language）, including the types of assertions and the SAML＇ s standard architecture, as well as SAML＇ s mainly applications under e-government. Considering the trust and authorization service are the important foundations for information security under e-government, the paper presented the architecture of a SAML-based trust and authorization system to solve the resource access and control problem, moreover, it analyzed the realization of authorization mechanism based on SAML in the former system.