| With the sharp development of information and technology and globalization of service industry developing rapidly nowadays, modern service industry has being an important part of the world economic landscape and becoming one of the driven forces for economic development. Electronic Authentication Services is defined that provide authentic and reliable public service activities for electronic signature parters. Electronic authentication services as one important component service of the modern service industry has played a key role in the modern service industry.Electronic authentication services as the development of modern service industry, particularly in the new services based on e-commence and e-government, has become the important way to solve the security.This dissertation is based on the project 'Research on Modern Service Industry Common Service Integrate Technology' which is a sub-project of 11th Five-year' National Key Technology R&D Program "Research on Electronic Authentication Services". Analysis of the current requirement of electronic authentication services as well as the problems faced, particularly the requirement of electronic authentication common service; Use of PKI as a security authentication technology through in-depth study and comparison of authentication techology such as kerberos, PKI, and research on SOA and Web Service, designing the overall solution of Electronic Authentication Services. Through in-depth research on electronic authentication services, designing the overall architecture module. The trust management module, that implements the unified authentication of the different CA, is the core support module. Througn the research on protocals such as SAML, SCVP, design and implement the trust Identity Credential, online certificate authentication, online identity authentication and online identity attribute services. Consideration and study on security services of system design. Use of SSL, WS-Security technical and safety code mechanisms to protect against the system security. The dissertation also on the electronic authentication services in the modern service industry applications are analyzed and discussed.The dissertation has been proposed single sign-on system based on electronic authertication services innovatively. Through research on existing single sign-on basic principles and implementing technical, analysis of single sign-on existing deficiencies and problems, combined with the advantages of electronic authentication service, and with reference to the numerous single sign model and protocol specification, design based on the electronic authentication services Single Sign-On System overall framework. The dissertation describes the system design principles, system functional model, as well as single sign-on system communication protocol design. Finally the system functionality and performance is analyzed and summarized. |
