The Research And Design On The Cross-domain Identiyt Authentication Based On Shibboleth

Of the information technology has developed rapidly, particularly internet technology and popularization of the use of network resource sharing of education becomes more and more convenient. the development of the ultimate goal is to achieve the shared resources, of course, the credits elected to each other, and scientific cooperation between different disciplines the intersection and merging of other features. At present, most of the institutions are established independently of the system has been in his own domain for single sign-on (sso). different domains in colleges and institutions often need online to the safety of the exchange of important information and data based on different institutions, therefore, different institutions and between the certification system will become very important.To on this basis the implementation of the various certification system integration and cross-border certification scope to the present research organizations. in the long run to the domain of the reduced resources development of information into and improve the efficiency of construction output; resources and opening to the shared, full use of academic institutions of higher education resources towards society, the construction services, has become an effective way to learn to type the city.At present, the Shanghai the college has its own status certification system, to achieve a unified identification authentication and single sign-on (SSO), and to build the school uniform identification authentication service is a good technology. but for the construction of a digital campus, all institutions are not the practice of the identification authentication service technical solutions that only part of the relevant requirements, lack a unified standards and institutions are using their own data model.This paper in the analysis of identification authentication and single sign-on (SSO) features and requirements are based on four different types of the domain identification authentication techniques, is based on the Shibboleth of the school of the framework of the research and design. first introduced the development of the identification authentication application by the user name and password authentication, to demand, and then single sign-on step, across domain access the network resources demand This article in the reunification of the identification authentication and single sign-on function, on the basis of research and design based on the shibboleth of the system across domain analysis, research in four different types of the domain identification authentication techniques, analysis and comparison are introduced after Shibboleth, and took it in the domain identification authentication process.Next to the domain identification authentication, analyzing the concepts of the mainstream of four across domain authentication. from the goals, and authentication procedures, standard and SAML across domain SSO other side a comparative study of these four authentication techniques. put the emphasis of the study is based on the Shibboleth of the domain identification authentication.Third, the Shibboleth of the components and the Idp the school system integrates unified identification authentication, the identity of data management and status of the credentials to the school system of unified identification authentication. the domain of the centre is just as the domain of the index, it does not maintain any data. detailed information a user identity across domain of the whole process, design and the strategy component of the interface design and installation.