基于J2EE Web Services的SSO系统的研究与设计

Research and Design of SSO Based on J2EE Web Services

通过研究和探讨J2EE Web服务技术,建立了中小企业信息化服务平台中的SSO系统。利用基于MVC的Struts技术实现了系统的架构;通过采用基于Session的用户会话跟踪技术,实现了统一认证服务的认证令牌;采用基于SSL的安全机制,保护了数据在传输时的完整性;另外,还研究了使用Web服务技术来进行各应用子系统的集成,实现了各应用子系统统一用户身份的认证。

Through studying and discussing several techniques based on J2EE Web Services, an SSO system for medium sized enterprise＇s information service platform is built. By using struts based on MVC technique, the system architecture is implemented ; by using user session tracking technique of Session, a session token is implemented ; SSL safety mechanism is used to protect data＇s integrality; in addition,them, by using various application sub systems , are integrated, and thus user authentication for various application sub systems is unipormed.