基于证书的多域多系统身份认证设计与实现

Design and implementation of multi-domain and multi-system identity authentication based on certificate

在工程仿真环境中,管理员需要对不同域和系统中的用户管理及身份认证方式进行统一,提高身份认证的安全性、可靠性。提出使用数字证书作为认证方式,设计并实现了基于数字证书的多域多系统下的统一身份认证。应用结果表明,用户使用存储于USBKey中的同一张数字证书就可以本地或远程访问不同域和环境中的资源。因此,不仅管理员可以对不同环境下的账户进行统一管理,而且增强了用户使用的易用性和身份认证的安全性。

In engineering and emulate environment, administrators often need to unify accounts management and identity authentication within different domain and system. They also need to increase security and reliability of identity authentication. A new method is presented, which uses digital certificate as the way of authentication. Unified identity authentication is designed and implemented in multi- domain and multi-system. Application result indicates that using same certificate stored in USBkey users can access resource by local or remote logon which belong to different domain and system. Accordingly not only administrators can uniformly manage all the accounts with several domains but also it improves application security and workability.