知識(shí)共享平臺(tái)建設(shè)中統(tǒng)一身份驗(yàn)證的設(shè)計(jì)與應(yīng)用Design an

文章分析了統(tǒng)一身份認(rèn)證系統(tǒng)在知識(shí)共享平臺(tái)建設(shè)中的必要性，提出了該系統(tǒng)總體框架。針對(duì)用戶單點(diǎn)登錄給出了一種利用安全聲明標(biāo)記語言（SAML）描述，基于kerberos協(xié)議的身份認(rèn)證體系結(jié)構(gòu)，同時(shí)，利用分布式目錄樹結(jié)構(gòu)開發(fā)了用戶身份和權(quán)限統(tǒng)一管理系統(tǒng)。在實(shí)現(xiàn)知識(shí)共享的同時(shí)，保證了資源的安全訪問，提高了系統(tǒng)的使用效率。
Abstract：This paper investigates the importance of uniform identity authentication system for building knowledge sharing platform, and presents the general framework of this system. An architecture based on kerberos Protocol and Security Assertion Markup Language is used to solve the issue of the Single User Sign-on to Multiple Services. This paper also discusses the issue of organizing user’s id and access control lists with the distributed directory tree method, and a real application model is presented. This system can provide a very effective and secure access on knowledge sharing system.
Key words: Authentication, knowledge sharing,single sign_on, Client Credential Management