Design of single sign-on

Author

Zhao, Gang ; Zheng, Dong ; Chen, Kefei

Author_Institution

Dept. of Comput. Sci. & Technol., Shanghai Jiao Tong Univ.

fYear

2004

fDate

15-15 Sept. 2004

Firstpage

253

Lastpage

256

Abstract

As IT systems proliferate to support business processes, users typically have to sign-on to multiple systems, necessitating an equivalent number of sign-on dialogues. Single sign-on can resolve the problem well. We first introduce the situation which makes the SSO becomes necessary. Then we elaborate the first version of our system and analyze its problems. Next, we improve the first version and propose the second version. Finally, we analyse the system and acknowledge the problems left open

Keywords

DP management; authorisation; business continuity; client-server systems; message authentication; public key cryptography; systems analysis; IP spoof attack; IT system analysis; SSL; authentication; business process; man-in-the-middle attack; private key; public key; single sign-on design; Access control; Authentication; Computer science; Cryptography; File servers; Information security; Laboratories; Network servers; Public key; Technology management; Authentication; IP spoof attack; SSL; Single Sign-On; man-in-the-middle attack; private key; public key;

fLanguage

English

Publisher

ieee

Conference_Titel

E-Commerce Technology for Dynamic E-Business, 2004. IEEE International Conference on

Conference_Location

Beijing

Print_ISBN

0-7695-2206-8

Type

conf

DOI

10.1109/CEC-EAST.2004.34

Filename

1388331