The Design And Implemention Of One Network User Identity Authentication System Based On Cookie Ticket

It demands high level of security requirement that developing commercial affairs, government affairs, office business over the opening network. The key security requirement among those includes participant's identity authentication, confidentiality, integrality and undeniable of conversation. But authentication service is the precondition and basis of all other security services.There are many application services in the portal system, the access control mechanisms of these application services are depended on identity authentication. To make user can be certificated once and then he can access many different application services many times, this paper designs one identity authentication scheme using cookie as the carrier of transporting authentication message, realizes the accessing to many kinds of resources based on logging in only once. This scheme uses the cookie information of HTTP protocol header to carry a digital ticket, the cookie ticket can be sent automatically to application services, the cookie ticket can be used many times during its life time, this is a single identity authentication for users based on cookie ticket.This paper first introduces the generating background, research actuality and realism meanings of the subject. Then based on mature theory model, author declares and designs a new sort of single identity authentication scheme using cookie ticket, also analyses the securities of this single identity authentication scheme and advances the improving direction, finally makes it into implementation on .NET platform and tests its client on .NET and JAVA platforms.