公众网络统一身份认证服务及标准研究

Study on Unified Identifier Authentication Service and Standards on Public Network

统一身份认证的目标是实现一个身份多处访问,以简化用户访问多个服务的流程。统一身份认证研究尚处于起步阶段。从统一身份认证的功能需求出发,在公众网络上以服务方式实现统一身份认证,提出了一种公众网络统一身份认证服务的网络架构。统一身份认证服务网络由多个身份认证服务提供商组成,每个服务商负责本地用户或服务统一身份信息的管理和认证;不同服务商通过各自的桥接服务进行互操作,实现非本地身份的认证。本文提出了一种基于行政区划的层次式的公众网络统一身份网络部署模型,最后讨论了统一身份认证服务的标准体系。

The aim of unified identifier authentication （UIA） is to log in multiple services with only one identifier to simplify user＇s access. Currently, the study of UIA is on its early stage. Taking into account UIA＇s functionality requirements, implementation of UIA, as a service in public network, was suggested, and an architecture of UIA service network was proposed. The UIA service network consists of multiple UIA service providers. Each is responsible for management and authentication of unified identifiers of local users and services. A provider could interoperate with others to authenticate non-local identifiers through bridge services of themselves. A hierarchy deployment model of UIA service network based on political administration regions was proposed as well. Finally, the standards system of UIA service was discussed.