Abstract:

Existing single sign-on (SSO) schemes are built on centralized user information storage mechanism and single authentication mode, and it’s hard to meet the requirement of business operations in the dynamic and loose-coupled environment. To solve above problems, the ticket technology, agent mechanism and digital signature are studied, a new better SSO scheme is presented that uses cookie transmission carrier and ticket technology to support multiple authentications SSO, in addition, it establishes a authentication trust chain to support cross-domain SSO based on certificate trust chain. The results show the new scheme provides higher security and wider usage range, while it overcomes the shortcomings of the existing.

Key words: single sign-on, multiple authentication modes, cross-domain authentication, trust chain