Design And Implementation Of The Uniform Identity Authentication System Based On Agent

With the development of Internet and information technology, many kinds of netwok-based applications can be used rapidly. Usually the users have to login deferent applications for its safety. If the uses login a lot of systems, they not only face many login interfaces, but also remember different usernames and passowords. It is a challenge for nowadays authentication system to provide a solution to simplify the processing of user's logins and keep security of each applications.Traditional universal authentication systems, such as Kerberos and PKI, have been implemented in some situation. But the too much modification for the current applications and relatively complicated technology stop these authentication systems using widely. The netwok Services as the new technology nowadays, which is loosely coupled, independent from platform and programming languge and capable of interoperability, give a new idea for the current authentication system.The paper designs an uniform identity Authentication system based on Agent technology based on analyzing the characteristic of a lot of unifom identity Authentication system. The system includes four categories of Agents: Application Agents deployed on the application systems, interaction with user authentication and attthorization servers transparent transmission of information to achieve the Single Sign On function; Authentication agent on the authentication server completes users' identity authentication, and will support multiple authentication methods; Access and Control Agent completes the users' distribution of authority accessing the application systems; Dispatcher Agent completes the Security, and reliable data transmissions for user authentication and authorization as a key component of the system. The system applies SSL to the assurance of data transmission security, and XM L as carrier of data.Each layer is independent, which not only ensures the relax coupling, but also enhances the integration of system. The old systemI jumps over the user login system and easily intergrates the system; the new system depends on this system to complete the user's authentication and authorization without its own user login system.