To address the scalability and identity federation problems of the traditional single sign-on system, the proposed scheme divides the security systems into different security domains. Each security domain has its own ...To address the scalability and identity federation problems of the traditional single sign-on system, the proposed scheme divides the security systems into different security domains. Each security domain has its own security servers and service providers, and there are trust relationships between different security domains for identity federation. The security server is responsible for authentication and authorization inside the domain, and offers identity federation capability for different domains. The security assertion markup language （SAML） assertion is used as security token in the system for authentication, authorization, and identity federation. The design of the proposed single sign-on process is based on web service security framework and multiple security domains, and the authorization is always deployed in the local area inside the service provider＇ s security domain, which enables web service clients, both inside and outside their security domains, to access the services in a simple, scalable, standard and secure way.展开更多
BeiDou Global Navigation Satellite System(BDS-3)not only performs the normal positioning,navigation and timing(PNT)functions,but also provides featured services,which are divided into geostationary orbit(GEO)and mediu...BeiDou Global Navigation Satellite System(BDS-3)not only performs the normal positioning,navigation and timing(PNT)functions,but also provides featured services,which are divided into geostationary orbit(GEO)and medium earth orbit(MEO)satellite-based featured services in this paper.The former refers to regional services consisting of the regional short message communication service(RSMCS),the radio determination satellite service(RDSS),the BDS satellite-based augmented service(BDSBAS)and the satellite-based precise point positioning service via B2b signal(B2b-PPP).The latter refers to global services consisting of the global short message communication service(GSMCS)and the MEO satellite-based search and rescue(MEOSAR)service.The focus of this paper is to describe these featured services and evaluate their performances.The results show that the inter-satellite link(ISL)contributes a lot to the accuracy improvement of orbit determination and time synchronization for the whole constellation.Compared with some other final products,the root mean squares(RMS)of the BDS-3 precise orbits and broadcast clock are 25.1 cm and 2.01 ns,respectively.The positioning accuracy of single frequency is better than 6 m,and that of the generalized RDSS is usually better than 12 m.For featured services,the success rates of RSMCS and GSMCS are better than 99.9% and 95.6%,respectively;the positioning accuracies of single and dual frequency BDSBAS are better than 3 and 2 m,respectively;the positioning accuracy of B2b-PPP is better than 0.6 m,and the convergence time is usually smaller than 30 min;the single station test shows that the success rate of MEOSAR is better than 99%.Due to the ISL realization in the BDS-3 constellation,the performance and capacities of the global featured services are improved significantly.展开更多
基金The National Natural Science Foundation of China(No60673054)
文摘To address the scalability and identity federation problems of the traditional single sign-on system, the proposed scheme divides the security systems into different security domains. Each security domain has its own security servers and service providers, and there are trust relationships between different security domains for identity federation. The security server is responsible for authentication and authorization inside the domain, and offers identity federation capability for different domains. The security assertion markup language （SAML） assertion is used as security token in the system for authentication, authorization, and identity federation. The design of the proposed single sign-on process is based on web service security framework and multiple security domains, and the authorization is always deployed in the local area inside the service provider＇ s security domain, which enables web service clients, both inside and outside their security domains, to access the services in a simple, scalable, standard and secure way.
基金supported by the National Natural Science Foundation of China(41931076,L1924033,and 41904042)National Key Research and Development Program of China(2020YFB0505800)。
文摘BeiDou Global Navigation Satellite System(BDS-3)not only performs the normal positioning,navigation and timing(PNT)functions,but also provides featured services,which are divided into geostationary orbit(GEO)and medium earth orbit(MEO)satellite-based featured services in this paper.The former refers to regional services consisting of the regional short message communication service(RSMCS),the radio determination satellite service(RDSS),the BDS satellite-based augmented service(BDSBAS)and the satellite-based precise point positioning service via B2b signal(B2b-PPP).The latter refers to global services consisting of the global short message communication service(GSMCS)and the MEO satellite-based search and rescue(MEOSAR)service.The focus of this paper is to describe these featured services and evaluate their performances.The results show that the inter-satellite link(ISL)contributes a lot to the accuracy improvement of orbit determination and time synchronization for the whole constellation.Compared with some other final products,the root mean squares(RMS)of the BDS-3 precise orbits and broadcast clock are 25.1 cm and 2.01 ns,respectively.The positioning accuracy of single frequency is better than 6 m,and that of the generalized RDSS is usually better than 12 m.For featured services,the success rates of RSMCS and GSMCS are better than 99.9% and 95.6%,respectively;the positioning accuracies of single and dual frequency BDSBAS are better than 3 and 2 m,respectively;the positioning accuracy of B2b-PPP is better than 0.6 m,and the convergence time is usually smaller than 30 min;the single station test shows that the success rate of MEOSAR is better than 99%.Due to the ISL realization in the BDS-3 constellation,the performance and capacities of the global featured services are improved significantly.
