The Design And Implementation Of Unitive Identity Authentication System Of Campus Network

With the development of the network and information technology, various applications are used in campus network and the services increase day by day. If users log in a lot of systems, they not only face many login interfaces, but also remember different usernames and passwords. Each system has their own account management and distrusts each other. System administrator has to maintain the information of users, and guarantee the consistency of all datas. It brings great difficulty to each systematic merger. As the increment of logins, the possibility of making mistakes, destroying illegally, being intercepted, being captured will increase and the security of systems will be reduced correspondingly.On the basis of the development of single sign on, the paper proposes a unitive identity authentication system of campus network. This system can access all network resources on commission. Users are required to input their usernames and passwords once. As a valid user, he can access any application that uses the single sign on with the same username and password. This system improves the efficiency of users and administrators, reduces expenses of the network operations, and makes the whole system more secure and convenient.Once the user gets the authentication token, he can access the web application using the system. So it is undeniable that the security of the token, the trust of the application and the authentication server have become the subject matter influencing the system to implement. There are many secure problems of network, such as the man in the middle attack, reply attack.The paper evaluates different implementation schemes and carries on systematic analysis of three implementations in detail. According to the actual conditions of the school, it designs and implements the unitive identity authentication system with CA certificate using tickets transmitting. This system adopts Web Service to build up, uses XML, SOAP technology and combines Web and non-Web applications on different platforms. The system can work, but the part based on non-Web application is still in developing at present.