Web服务中跨域安全的认证与授权研究

The Research of The Cross-Domain Authentication and Authorization of The Security in The Web Service

在跨域访问中，传统的集中式或分布式管理越来越难以适应系统间移植性、扩展性和安全性方面的发展，从而导致孤立的用户体验和复杂的管理。提出一种基于XACML和SAML的Web跨域访问控制模型，利用XACML控制用户对单个安全域资源的访问，SAML用来在多个安全域之间传输验证结果，解决单点登录问题。两者结合有效的解决了多个类似安全域系统之间验证模型的可移植性和扩展性，并通过对XML加密，提供了更加安全的信息传输服务。

The traditional centralized or distributed management is becoming more and more difficult to adapt the portability, expansibility and security of the systems in the cross-domain access,and it also led to isolation of the user experience and the management of complex.This paper proposed a cross-domain access control model based on XACML and SAML,control user access to a single security domain resource by XACML and transfer verification results between multiple security domains to solve the single sign-on problem by SAML.The effective combination of both solve the portability, expansibility of the verification model between a number of similar security domain,and provide a more secure information transmission services by XML encryption.