基于JA-SIG CAS统一认证平台(SSO)的设计与实现

Design and Implementation of the Unified Authentication Platform (SSO) Based on JA-SIG CAS

基于JA-SIG CAS框架,设计、实现了一个单点登录统一认证平台,为大型网站提供安全统一的用户身份认证服务。统一认证平台分为SSO CAS服务器端和CAS客户端,服务器端采用SSL加密协议的https方式部署,客户端采用http方式部署。平台运用Spring Securit、Spring Remote、Hibernate3、Struts 2.2等技术,以及PGTIOU(代理授权许可证索引)、PGT(代理授权许可证)、PT(代理许可证)、ST(服务许可证)、TGC(Ticket凭证存放cookie)等关键数据结构,实现统一身份认证的服务票据生成、授权、检查、保存、发送等,提供单点登录服务。

Based on the JA-SIG CAS framework,a single sign-on unified authentication platform is designed and realized,it provides secure and unified user’s identity authentication service for big web site.The unified authentication platform consists of SSO CAS server and CAS client.The server is deployed by using HTTPS format of SSL ENCRYPTION PROTOCOL and the client is deployed by using HTTP format.The platform adapts Spring Securit,Spring Remote,Hibernate3 and Struts 2.2,etc.,as well as the critical data structures of PGTIOU（proxy-granting ticket IOU）,PGT（proxy-granting ticket）,PT（proxy ticket）,ST（service ticket）,TGC（ticket-granting cookie） to the platform in order to realize the service bill generation,authorization,check,save and send on the unified identity authentication server to provide an single sign-on service.