基于Peer to Peer的单点登录服务研究和实现*

使用PeertoPeer模型设计了一种新的单点登录服务模型，并在国家科技基础条件平台门户应用系统的身份认证系统中实际应用。该方案（NPSSO）把身份认证分配到多个身份认证服务器上，每个身份认证服务器均由一个单独的管理系统来管理，能够大大提高容错和抗攻击能力，并且能保证系统在用户和服务的数量上具有良好的可扩展性。最后，对该套单点登录方案进行了性能分析和相关工作的比较。

Research and Application of Peer to Peer Model Single Sign On

NPSSO is a distributed service for authentication in networks. It allows application servers to delegate client identity checking to combinations of authentication servers potentially residing in separate administrative domains. In NPSSO, authentication policies enable the system to tolerate expected classes of attacks and failures. A novel partitioning of the work associated with authentication of principals means that the system scales well with increases in the numbers of users and services.