Research and design of single sign-on scheme
Lin Zhong · Jisuanji gongcheng yu sheji · 2009
In order to resolve the shortage of SSO(single sign-on) system based on Kerberos protocol or certificate mechanism,an improved SSO scheme,which combined the method of Kerberos and certification techniques,is put forward. The scheme not only solves single point failure problem in Kerberos technique and inefficient problem in certification technique,but also provides a new method to protect data of user management center and prevent DDos(distributed denial of Service) attack,as a result,the scheme is good at security,efficiency and reliably. Presently,a SSO system based on the improved scheme is realized,and is applied in the web service environment of service oriented architecture.