基于SAML單點(diǎn)登錄安全服務(wù)體系的應(yīng)用研究

安全斷言標(biāo)記語(yǔ)言SAML是讓互相信賴的雙方可以交換安全相關(guān)信息的一個(gè)XML架
構(gòu)，它定義了不同系統(tǒng)之間安全服務(wù)交換認(rèn)證和授權(quán)信息的機(jī)制，單點(diǎn)登錄技術(shù)SSO是實(shí)現(xiàn)集成身份認(rèn)證和授權(quán)服務(wù)的有效方法，通過(guò)對(duì)傳統(tǒng)的SSO分析，提出一種基于SAML、利用PKI/PMI的單點(diǎn)登錄企業(yè)級(jí)的應(yīng)用系統(tǒng)，有效解決跨域系統(tǒng)和異構(gòu)應(yīng)用平臺(tái)的一次認(rèn)證、全程訪問(wèn)的安全信息交換；成功在“金稅三期”資源整合中界面整合及門戶項(xiàng)目得到應(yīng)用。
關(guān)鍵詞: 安全斷言標(biāo)記語(yǔ)言；單點(diǎn)登錄；安全服務(wù)；認(rèn)證；授權(quán)
Abstract: The Security Assertion Markup Language (SAML) is an XML framework for
exchanging security information between reliantly parties, it defines a mechanism for exchanging authentication and authorization information among different systems, Single Sign On (SSO) is an effective method which implement Integrated authentication and authorization。Base on analyze traditional SSO ,this paper discussed an effective application system using SAML and PKI/PMI technology , which resolved Security information exchange among heterogeneous system through once authentication realize full access. This technology was used successful in the project of “third of CTAIS”.
Key words: SAML；SSO；Web Services；Authentication；Authorization