Research on Multi-level Security of Shibboleth Authentication Mechanism

Shibboleth, a growing popular solution to Single Sign-On (SSO), can simplify the user´s operation process and reduce the resource provider´s overhead. The multi-level security of Shibboleth has become a topic of concern. The basic Shibboleth infrastructure was introduced based on the current SSO solutions. Then we summarized the BLP model, which is considered the basic security axiom in our work. Based on BLP model we proposed a security access control method for Shibboleth, which can be used to solve the problem on access control of multi-level security.