A lightweight Web Cross-Domain Authentication and Data Sharing Scheme
Yao Ya · Journal of Shenyang Jianzhu University · 2014
A lightw eight cross-domain authentication and data sharing scheme for Web environment is presented in this paper. Based on standard HTTP protocol,a simple single sign-on mechanism is designed in the Web environment,w hich ensures that the user can access private data from multiple domains by the w ay of authentication and authorization. Compared w ith Oauth and some other protocols,the protocol of the proposed scheme is more lightw eight. In the client side,it takes full advantage of the Web brow ser techniques,such as URL redirection,cookie and cache; in the server side,it only relies on simple symmetric encryption,authentication,and data storage. It founds that the proposed scheme is simple,effective and flexible. Besides,the development,deployment and maintenance costs of the scheme are relatively low,and it is suitable for small and medium sized Web applications or systems w hose security requirements are not too high.