SHA-1算法在基于LDAP的统一身份认证中的应用

Application of SHA-1 Algorithm in Unified Identity Authentication Based on the LDAP

随着统一身份认证系统的广泛应用,解决了在大量的网络应用系统中需要进行重复性身份认证的问题,但在身份认证中用户数据信息的存储和传输存在着安全隐患.文章介绍了SHA-1消息摘要算法,并将其运用在基于LDAP的统一身份认证系统中.用户密码经过SHA-1算法加密处理后存储在LDAP目录服务器中,在用户进行身份认证时先将用户密码先进行解码,然后与LDAP目录服务中密码进行认证比对.该方法提高了用户数据信息的安全性,为统一身份认证系统的安全通信提供保障.

With the extensive application of unified identity authentication, the problem of repetitive authentication process in large numbers of network applications was solved. However, user data in the storage and transmission tended to be insecure. This paper mainly introduced the SHA-1 massage digest algorithm, and also applied it in unified identity authentication based on LDAP. The user password encrypted by SHA-1 algorithm are stored in the LDAP directory server.When checking us- er identity,it firstly decoded the user password, and then compared with the password in the LDAP directory service.The method improves the security of user data information and provides protection for the safe communication of unified identity authentication system.