基于互不信任企业联盟的统一身份认证模型

现有的统一身份认证模型采用单个密码对用户身份进行验证,这种方式无法对企业的商业秘密进行有效地保护,并且认证效率低,因而不被大多数企业所接受.为了解决这个问题,在对现有模型存在的问题进行分析的基础上提出一种新的认证模型.该模型把用户的信息分成两部分--共享信息和私有信息,并采用一对密码--本地密码和共享密码分别对这两部分信息进行保护.用户可以利用共享密码在不同网站中漫游,实现统一身份认证;而网站通过本地密码来保护属于商业秘密的那部分信息.该模型能够保护商业秘密,又能够在一定程度上提高认证效率.

Uniform identity authentication model based on mutually unreliable enterprise alliance

The existing uniform identity authentication models adopt a single password to authenticate user's identity,which can't protect business security effectively and are inefficient in authentication process.As a result,they can't be accepted by most corporations.In order to solve this problem,a new model is designed based on the analysis of these existing models.This model divides user information into two parts that is share information and private information,and sets two passwords including local password and share password,to protect the different information.Web users can roam among different websites by using the share password,and websites can protect the information,which is their business secret,by using the local password.This model can protect business security and improve authen-tication efficiency.