Technology Of Single Sign-on System Based On OAUTH Protocal

With the development of internet and informatization of enterprises, a lot of enterprise applications and internet systems developed many different products and systems in different stages of development and they need to introduce some third party applications due to various user needs. When users visit those systems which may have independent security verification mechanism, users need to remember different verification documents (such as usernames and passwords) of different systems or internet sites. That case makes burden of users and security hidden danger greatly increased. In order to develop a more secure, reliable system that could simplify user login and access to some network resources, technology of single sign on was brought in. The main purpose of SSO system is to put the identity verifications of all systems together on a server or a server cluster, so users only need to login only once to visit all resources of those systems.However, the traditional single sign-on must solve the problem of trust between the system and the third party applications. As a result, the scene of their application has significant limitations.On the basis of the above problems, this paper studied a single sign-on method based on OAUTH protocol, which is proposed in the projects-"basic resources and networks in the field of research oriented information and communication service platform", cooperated with the Beijing Municipal Education Commission. The paper also designed and realized Single Sign-On method based on MVC model and J2EE architecture. This method used a series of new design processes in the authentication and authorization, not only ensuring the security of the authentication and authorization of the system, but also making the system more portable and easy to expand.