一种在Android移动终端实现单点登录的新方法

A New Method for Single Sign-on at Android Terminal

针对目前移动办公越来越普及,各大企业纷纷开发了企业内部各种各样的移动端应用系统。企业员工需要频繁登录这些应用系统,每次登录就浪费了大量时间,降低了工作效率。同时,企业员工需要记忆繁多的用户名和密码,不仅费时费力而且还存在安全隐患。因此,开发出一种能在移动端进行安全单点登录的新方法是很有必要的。通过分析移动终端上单点登录的发展前景与现状,提出了一种在Android设备上进行安全单点登录的新方法。该方法基于智能密码钥匙的数字证书认证技术来实现身份认证,通过Android应用程序显示授权资源,基于SOAP协议完成单点登录,实现了基于Android客户端的数字证书身份认证与单点登录来访问相互信任的资源。实验结果表明,该系统能支持异构系统的单点登录,用户只需一次身份认证就能访问所有授权应用,提高了用户数据安全性和工作效率,同时也为管理员的管理带来了便捷。

In view of current mobile office which is becoming more and more popular,the major companies have developed a variety of internal mobile terminal applications. Enterprise employees need to log in these applications frequently, and each time they log on to waste a lot of time,reducing the efficiency of the work. At the same time,they need to remember a wide variety of user name and password,not only time-consuming and hard work,but also the existence of security risks. Therefore,it is necessary to develop a new method which can carry on the secure single sign on the mobile terminal. Through the analysis of the prospect and present of terminal application and the ex- isting single sign-on system,a new method for single sign-on based on Android mobile terminal is put forward. This method is based on the digital certificate technology and combines the SOAP protocol and Web Service to make the identity authentication come true. And it uses Android application instead of browser＇ s redirection technology which can get the authorized resources. Thus the access to different application systems has been constructed by digital certificate identity authentication technology and single sign-on based on Android mo- bile terminal comes true. The experimental results show that this system supports single sign-on between different systems, and the user just needs to log in once to access to all the authorized resources, and that it can not only improve the efficiency of users, but also bring convenience to the administrator＇s management.