基于OpenID安全认证的Web实时通信系统

Web Real-Time Communication System based on OpenID Security Authentication

Web实时通信(WebRTC,Web Real-Time-Communication)是互联网应用快速发展的产物,它以轻量级、跨平台、符合云计算理念等特点,将成为实时通信的发展趋势。但由于目前WebRTC尚无一种可通用的认证系统,这将存在一定的安全隐患。详细介绍了基于Web的身份认证技术OpenID,并将其用于WebRTC中实现对用户身份的认证。实验结果表明:OpenID适用于WebRTC,并且其基于Web的理念与WebRTC一致,这对WebRTC正式标准中认证系统的设计具有一定的借鉴意义。

WebRTC（Web real-time communication） is the product from the rapid development of Internet application, and for its advantages of lightweight, cross-platform and conformability to the concept of cloud computing, would become the development trend of real-time communication. However, for lack of universal identification systems, some security hidden-didden-dangers still exist in WebRTC. This article discusses in detail the Web-based OpenID technology. This technology is used in WebRTC system for the user＇s ID authentication. The experiment results indicate that OpenID is suitable for the identification of WebRTC, and its Web-based concept is consistent with that of WebRTC. This is of certain reference for the design of authentication system in WebRTC standard.