基于安全聲明標記語言的智能登錄系統(tǒng)研究.pdf

1、浙江大學碩士學位論文基于安全聲明標記語言的智能登錄系統(tǒng)研究姓名：成曦申請學位級別：碩士專業(yè)：計算機應用技術指導教師：尹建偉20060601Nowadays，thedevelopmentofcomputernetworktechnologyandthecontinuousemergingnetworkapplicationsmakeusersmoreconvenient，butalsobringchaNengestomanaginguse

2、rs’passwordAndtheproposedofSingleSignonfsso)systemCallsimplifytheloginprocess，saveusers’time，andmaketheusersbeabletousemanyapplicationsbyloginonceCurrentSSesearchhasencounteredtheproblemsoftheimmaturenesssupportingnon—ho

3、mologoussystemsofaccesscontrolintegration，theabsenceofPMIsystemsupportingdistributedapplication，poortheabilityofprocessenterpriseclasslargescaledata，theweaknessofsupportingEAIandperformingsystemintegrationTosolvethesepro

4、blems，thisthesisproposesanintelligentsignonsystem，basedonSAMLandPKIfPMIarchitecturesThisSystemhastheadvantagesinmulti—modeintegrationsupportinghighflexibilityenterprise—classsupportingdistributedabilityetcThemaincontents

5、ofthispaperareaboutthetechnologiesofaccesscontrolandprivilegemanagement，andthearchitectureofSSOsystemInthe1stchapter，weoutlinetheSSOsystemThebackgroundandprospectofSSOsystemarebrieflyintroducedAsurveyofdevelopinghistorya

6、ndthechallengesencounteredinthecurrentresearcharealsoexplalnedAttheendofthischapterweintroducethebackgroundofthisthesisanditssummaryChapter2introducessomespecificationandarchitectureofSSOAfullydescriptionofSAMLisalsopres

7、entedinthischapterThen，weintroducePKI／PMIkeyconcepts，forinstanceCAR～SOAA氣certificateanditsstorageInthe3rdchapterweproposethearchitectureandmodelofSAMLbasedsinglesign—onsystemAndthenillustratetheprincipleofmultimodeapplic

8、ation，PKIbasedkeydistributingarchitecture，thegenerationandvalidationofSAML幻kc瑪andconfignrableauthenticationplug—inAfterwards，weanalyzethefeaturesandadvantagesofourmodelinsecufit5extensibilitymultimodelsupport，andinformat

9、ionshareInthe4thchapterweintroducekeytechnologiesofintelligentsign—onsystem；proposetheframeworkofRole—basedAccessContr01Thenthesecnreinformationshareamongthemembersistakenintoconsideration，aprivilegemanagementframeworkba