云计算综合信息服务平台下基于REST的单点登录模型设计与研究

The Design and Research of Single Sign-On Model Based on REST in the Cloud Computing Integrated Information Service Platform

摘要: 云计算技术的发展，使得互联网应用系统的开发过程日趋平台化。云计算结合信息服务平台组成了现代信息服务基础设施。基于云计算综合信息服务平台的应用服务更加丰富多样，这些应用都需要统一的身份认证和访问控制管理机制，以提高应用开发的便捷性和安全性。单点登录系统就是实现这一机制不可缺少的功能模块。本文通过介绍一种基于REST协议并且具有高效性、扩展性的单点登录模型，着重解决系统设计与研究过程中的票据分发和维护等关键问题，说明系统实现过程中的流程规范，并进一步讨论集中式单点登录系统中的安全及性能优化的主要方向。

Abstract: Cloud computing technology makes the Internet applications development easier. Cloud computing combining information service platform becomes modern information services infrastructure. Application services based on cloud computing integrated information service platform become more diverse. These applications require the unified identity authentication and access control management mechanisms to improve the ease and the security of the application development. Single sign-on system is an indispensable function module to implement this mechanism. This pa-per describes an efficient and scalable single sign-on model based on REST protocol. This paper also focuses on solving the issues of token distribution and maintenance in the system. In the addition, it discusses the main directions of security and performance optimization in centralized single sign-on system.