The Design And Implementation Of CAS-based, Cross-platform, Security Single Sign-on Service

At present, with the development of the Internet technology and the importance of theinformation construction, information systems are widely used in modern enterprises. In orderto promote clients’ efficiency, many versatile information systems such as human resourcesmanagement system, email system are widespread in enterprises. The improvement ofinformation systems can make solid foundation about the process of enterprises. While usershope that they can use these systems by login once, and they can avoid remembering differentauthentications. Under this case, the single sign on system emerges.This paper first gives the overview of the single sign on system and the relatedtechnologies. CAS(Central Authentication Service), a single sign on system proposed by Yaleuniversity will be discussed in details. After that, some shortcomings of the CAS will bepointed out. For example, it only supports the web applications under the B/S model, and itcan’t work well with the desktop applications under the C/S model. In addition, and it is notcompatible with single sign on operations among popular browsers. So, a new protocol basedon CAS called CAS-PLUS is designed and implemented in this paper and it can solve theproblems in CAS.CAS-PLUS single sign on system not only supports the web applications under the B/Smodel, but also work well with the desktop applications and is compatible with single sign onoperations among popular browsers. What’s more, the CAS-PLUS system introduces a singlesign on permission model based on wighted coarse grain which can be adapted in an differentapplication service permissions environment. Moreover, safety measurements used to avoidviolence crack is adopted in CAS-PLUS. Experiments show that the CAS-PLUS system canmake up the shortcomings of the CAS system, and provide more flexible and safer single signon services.