CN111131301A - Unified authentication and authorization scheme - Google Patents
Unified authentication and authorization schemeDownload PDFInfo
- Publication number
- CN111131301A CN111131301ACN201911408143.5ACN201911408143ACN111131301ACN 111131301 ACN111131301 ACN 111131301ACN 201911408143 ACN201911408143 ACN 201911408143ACN 111131301 ACN111131301 ACN 111131301A
- Authority
- CN
- China
- Prior art keywords
- client
- authentication
- authorization
- class
- token
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000013475authorizationMethods0.000titleclaimsabstractdescription84
- 238000000034methodMethods0.000claimsabstractdescription15
- 230000008569processEffects0.000claimsabstractdescription7
- 238000004891communicationMethods0.000claimsabstractdescription5
- 230000005540biological transmissionEffects0.000claimsdescription4
- 230000001419dependent effectEffects0.000claimsdescription3
- 238000003860storageMethods0.000claimsdescription3
- 238000012795verificationMethods0.000abstractdescription7
- 230000004888barrier functionEffects0.000abstractdescription2
- 238000007670refiningMethods0.000abstract1
- 230000009286beneficial effectEffects0.000description2
- 238000012423maintenanceMethods0.000description2
- 230000002776aggregationEffects0.000description1
- 238000004220aggregationMethods0.000description1
- 230000008859changeEffects0.000description1
- 238000013075data extractionMethods0.000description1
- 238000011161developmentMethods0.000description1
- 238000010586diagramMethods0.000description1
- 230000002708enhancing effectEffects0.000description1
- 230000010354integrationEffects0.000description1
- 238000004519manufacturing processMethods0.000description1
- 238000012986modificationMethods0.000description1
- 230000004048modificationEffects0.000description1
- 230000001360synchronised effectEffects0.000description1
Images
Classifications
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Storage Device Security (AREA)
Abstract
Description
Technical Field
The invention relates to a unified authentication and authorization scheme, and belongs to the technical field of information.
Background
With the development of internet applications, more and more application systems are deployed on servers in different regions, and the systems are independent in geographical location and are connected together by using a network. Along with the continuous expansion of the scale, the pressure on managers is increased.
In a common method for logging in and authenticating an application system, each system usually has an independent authentication module and authority data, so that when the systems are too many, each system needs to be logged in through authentication of a corresponding system once, and the authentication mode causes frequent login operation, inconvenient use of a user and low multi-system login efficiency. Meanwhile, due to the heterogeneous data, the personnel information cannot be intercommunicated, and the change of the user information requires the synchronous maintenance of multiple systems, so that the maintenance cost is greatly increased.
Disclosure of Invention
Aiming at the problems in the prior art, the invention provides a uniform authentication and authorization scheme for realizing information intercommunication, improving the multi-system login efficiency and reducing the production cost.
In order to achieve the purpose, the invention adopts the technical scheme that: a unified authentication and authorization scheme is characterized by comprising the following steps;
the method comprises the following steps: the third-party system introduces an authorization client sdk, introduces necessary dependent configuration, increases parameters such as a trusted client ID and a key registered by an authorization server and an authorization server root address by a configuration file, and creates a security control class to start spring security authority control and OAuth2.0 authorization flow;
step two: authentication control core class configuration and an allowed authentication mode of client authentication, wherein the acquisition processes of four OAuth2.0 tokens including an authorization code, a hidden type token, a password type token and a client certificate are supported; the authentication control class loads cache class, password encryption class and JWT encryption class of the registered client through configuration, enhances control of self-defined data transmission and the like, and configures URL link control, login and logout and WEB security control parameters; the resource control class is matched with the safety control class to control the opening of a server-side interface;
step three: the Web browser accesses a client interface, a client system detects that a user has no authorization information through an accessed client sdk security control core class, and redirects the client to an authorization server, the authorization server authenticates whether the client is registered in advance, and the client information is correct and jumps to an authorization server login page; otherwise reject the authentication request of the customer end;
step four: the authorization server logs in the page and fills out the authentication information correctly, the authorization server "user authentication type" preserves the login information after the authentication succeeds, the client system initiates OAuth2.0 token acquisition flow through https safe communication channel; the authorization server acquires account login information and generates a temporary authorization code; calling back a URL registered by the client, confirming that the client is not forged, carrying an authorization code by the client to initiate a request for applying the electronic token, and realizing encryption of account information by a JWT token realization class of an authorization server and generating the electronic token which accords with a JWT specification to be issued to the client;
step five: the Web browser acquires and stores the electronic token, when a user needs to quit the system, the user can log off the current system and clear the local token in the client browser, and when the user accesses other systems again, the user cannot directly access the system, and the user can be redirected to an authentication login page of the authorization server to perform identity authentication again;
further, the client system inherits the client sdk security control class and interacts with the authorization server through the "security control class".
Furthermore, the authorization server 'authentication control class' in the second step adopts an Adapter mode.
Further, the token encryption storage of the "JWT token implementation class" of the authorization server in the fourth step adopts a template mode, so as to encrypt the token and store the template.
The invention has the beneficial effects that: the method breaks the old system login and authority control mode, realizes the safe verification and authorization process by realizing OAuth2.0 open standard, solves the problem of cross-domain identity verification by using JWT, simultaneously uses an encrypted HTTPS protocol for transmission, protects information safety, reduces the probability of stealing, and the controlled system integration client sdk is accessed into the unified authentication and authorization center, thereby realizing the unified authentication and authorization center to take over the login and authority control of the controlled system, and realizing high safety, high availability and high universality at the company level. The barrier between systems developed based on Java in an enterprise is broken through, unified management and control of basic information such as user authority and the like are achieved, and the operation management cost of the enterprise is reduced. The access of each subsystem and the access of an external system can be detailed and controlled through the unified authentication authorization center, and the credibility of the access system is ensured. Meanwhile, the consistency of basic information sources such as user rights and the like can realize the communication of all systems in an enterprise, and reports beneficial to decision can be obtained through data extraction and aggregation analysis. The enterprise staff can log in through the unified authentication and authorization center without recording each system account, so that the use cost of the staff is reduced.
Drawings
FIG. 1 is a diagram of unified authentication login according to the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is further described in detail below with reference to the accompanying drawings and examples. It should be understood, however, that the description herein of specific embodiments is only intended to illustrate the invention and not to limit the scope of the invention.
Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, and the terms used herein in the specification of the present invention are for the purpose of describing particular embodiments only and are not intended to limit the present invention.
As shown in fig. 1, a unified authentication and authorization scheme includes the following steps;
the method comprises the following steps: the third-party system introduces an authorization client sdk, introduces necessary dependent configuration, increases parameters such as a trusted client ID and a key registered by an authorization server and an authorization server root address by a configuration file, and creates a security control class to start spring security authority control and OAuth2.0 authorization flow;
step two: the method comprises the steps of authentication control core class configuration and an allowed authentication mode of client authentication, wherein four OAuth2.0 token acquisition processes of an authorization code (authorization-code), a hidden (identifier), a password (password) and a client certificate (client certificate) are supported; the authentication control class is used for loading cache class, password encryption class and JWT encryption class of the registered client side through configuration, enhancing control of user-defined data transmission and the like, and the security control class is used for configuring URL link control, login logout and WEB security control parameters. The resource control class is matched with the safety control class to control the opening of a server-side interface;
step three: the Web browser accesses a client interface, a client system detects that a user has no authorization information through an accessed client sdk security control core class, and redirects the client to an authorization server, the authorization server authenticates whether the client is registered in advance, and the client information is correct and jumps to an authorization server login page; otherwise reject the authentication request of the customer end;
step four: the authorization server logs in the page and fills out the authentication information correctly, the authorization server "user authentication type" preserves the login information after the authentication succeeds, the client system initiates OAuth2.0 token acquisition flow through https safe communication channel; the authorization server acquires account login information and generates a temporary authorization code; calling back a URL registered by the client, confirming that the client is not forged, carrying an authorization code by the client to initiate a request for applying the electronic token, and realizing encryption of account information by a JWT token realization class of an authorization server and generating the electronic token which accords with a JWT specification to be issued to the client;
step five: the Web browser acquires and stores the electronic token, when a user needs to quit the system, the user can log off the current system and clear the local token in the client browser, and when the user accesses other systems again, the user cannot directly access the system, and the user can be redirected to an authentication login page of the authorization server to perform identity authentication again; thereby realizing 'unified login, unified authentication and unified logout' of the user;
the client system inherits the client sdk security control class and interacts with the authorization server through the "security control class".
And the authorization server of the second step adopts an Adapter mode for authentication control.
And the token encryption storage of the 'JWT token implementation class' of the authorization server in the step four adopts a template mode to encrypt the token and store the template.
The scheme discloses a solution for realizing unified authentication authorization based on a java language and a springsecurity framework system. The method realizes a safe verification and authorization process through an OAuth2.0 open standard, solves the problem of cross-domain identity verification by using JWT, and simultaneously transmits by using an encrypted HTTPS protocol, thereby protecting information safety and reducing the probability of being stolen. The scheme mainly comprises an authorization module, a resource module and a client sdk, wherein the authorization module is mainly responsible for client verification and user information authentication and issuing a JWT token after the authentication is successful; the resource module is mainly responsible for the management of the externally opened resources at the service end; the client sdk cooperates with the server authorization module to complete the authentication authorization process, and obtains the JWT token issued by the server, obtains the user information, and can obtain the resources specified and opened by the server through the JWT token.
The user accesses the third party application system, detects whether the token is owned by the third party system integrated client sdk, and if the token is not owned, the authorization server first verifies the validity of the third party application system. And after passing the verification, guiding the user to a login page of the authorization server to perform identity authentication. And after the identity authentication is passed, the authorization server issues the temporary token to the third-party application system through the registered callback URL. And the third-party website acquires the access token from the authorization server according to the temporary token. And accessing the resources opened by the authorization server according to the token. If the user needs to log out of the system, the user can log out of the current system and clear the local token in the client browser, and then when the user accesses the third-party system again, the user cannot directly access the system, and the user can be redirected to the authentication login page of the authorization server to perform identity authentication again; therefore, the user can realize 'unified login, unified authentication and unified logout'.
The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents or improvements made within the spirit and principle of the present invention should be included in the scope of the present invention.
Claims (3)
1. A unified authentication and authorization scheme is characterized by comprising the following steps;
the method comprises the following steps: the third-party system introduces an authorization client sdk, introduces necessary dependent configuration, increases parameters such as a trusted client ID and a key registered by an authorization server and an authorization server root address by a configuration file, and creates a security control class to start spring security authority control and OAuth2.0 authorization flow;
step two: authentication control core class configuration and an allowed authentication mode of client authentication, wherein the acquisition processes of four OAuth2.0 tokens including an authorization code, a hidden type token, a password type token and a client certificate are supported; the authentication control class loads cache class, password encryption class and JWT encryption class of the registered client through configuration, enhances control of self-defined data transmission and the like, and configures URL link control, login and logout and WEB security control parameters; the resource control class is matched with the safety control class to control the opening of a server-side interface;
step three: the Web browser accesses a client interface, a client system detects that a user has no authorization information through an accessed client sdk security control core class, and redirects the client to an authorization server, the authorization server authenticates whether the client is registered in advance, and the client information is correct and jumps to an authorization server login page; otherwise reject the authentication request of the customer end;
step four: the authorization server logs in the page and fills out the authentication information correctly, the authorization server "user authentication type" preserves the login information after the authentication succeeds, the client system initiates OAuth2.0 token acquisition flow through https safe communication channel; the authorization server acquires account login information and generates a temporary authorization code; calling back a URL registered by the client, confirming that the client is not forged, carrying an authorization code by the client to initiate a request for applying the electronic token, and realizing encryption of account information by a JWT token realization class of an authorization server and generating the electronic token which accords with a JWT specification to be issued to the client;
step five: the Web browser acquires and stores the electronic token, when a user needs to quit the system, the user can log off the current system and clear the local token in the client browser, and when the user accesses other systems again, the user cannot directly access the system, and the user can be redirected to an authentication login page of the authorization server to perform identity authentication again;
the client system inherits the client sdk security control class and interacts with the authorization server through the "security control class".
2. The unified authentication and authorization scheme according to claim 1, wherein the authorization server "authentication control class" of step two adopts Adapter mode.
3. The unified authentication and authorization scheme according to claim 1, wherein the JWT token implementation class token encryption storage of the authorization server of step four employs a template method for encrypting the token and storing the template.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911408143.5ACN111131301A (en) | 2019-12-31 | 2019-12-31 | Unified authentication and authorization scheme |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911408143.5ACN111131301A (en) | 2019-12-31 | 2019-12-31 | Unified authentication and authorization scheme |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111131301Atrue CN111131301A (en) | 2020-05-08 |
Family
ID=70506197
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911408143.5APendingCN111131301A (en) | 2019-12-31 | 2019-12-31 | Unified authentication and authorization scheme |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111131301A (en) |
Cited By (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111625800A (en)* | 2020-06-05 | 2020-09-04 | 光载互联(杭州)科技有限公司 | Digital identity authentication method and system based on in-vivo detection |
| CN111770088A (en)* | 2020-06-29 | 2020-10-13 | 南方电网科学研究院有限责任公司 | Data authentication method, apparatus, electronic device and computer-readable storage medium |
| CN112235285A (en)* | 2020-10-12 | 2021-01-15 | 山东健康医疗大数据有限公司 | Method and system for user authentication mode and service based on non-session |
| CN113468504A (en)* | 2021-07-01 | 2021-10-01 | 厦门悦讯信息科技股份有限公司 | Method and system for single client to access multiple servers |
| CN114139141A (en)* | 2021-10-21 | 2022-03-04 | 北京快乐茄信息技术有限公司 | Unified authentication method, device, terminal and storage medium |
| CN114417363A (en)* | 2021-11-16 | 2022-04-29 | 中国农业银行股份有限公司深圳市分行 | A method, system and storage medium for realizing bank application security control |
| CN114793243A (en)* | 2021-01-26 | 2022-07-26 | Sap欧洲公司 | One-time use authorization code in self-contained format |
| CN115085944A (en)* | 2022-08-22 | 2022-09-20 | 四川蜀天信息技术有限公司 | Multi-space scene RESTful API unified user authentication management method and system |
| CN115396205A (en)* | 2022-08-26 | 2022-11-25 | 上海浦东发展银行股份有限公司 | Integrated authorization system and method thereof |
| CN115442071A (en)* | 2022-07-26 | 2022-12-06 | 新奥新智科技有限公司 | Functional authority management method, device, electronic device and storage medium of an item |
| CN115567885A (en)* | 2022-09-27 | 2023-01-03 | 山东浪潮科学研究院有限公司 | Mobile phone short message authorization trusteeship service system |
| CN115952487A (en)* | 2023-03-14 | 2023-04-11 | 青岛安工数联信息科技有限公司 | Tenant information configuration system and method under various organizations |
| CN116107270A (en)* | 2021-11-11 | 2023-05-12 | 上海宝信软件股份有限公司 | Unified Authorization Method and System in Multi-Base Industrial Scenario of Headquarters |
| CN117353975A (en)* | 2023-09-08 | 2024-01-05 | 国联人寿保险股份有限公司 | Multi-terminal security unified login authorization system and method based on enterprise WeChat |
| CN117675338A (en)* | 2023-12-04 | 2024-03-08 | 佛山众陶联供应链服务有限公司 | Method and system for communicating different authentication systems |
| US12113903B2 (en) | 2021-01-26 | 2024-10-08 | Sap Se | Long-lasting refresh tokens in self-contained format |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20170264612A1 (en)* | 2016-03-11 | 2017-09-14 | Oracle International Corporation | System and method for providing a universal security handler for a cloud-based integration platform |
| CN107786571A (en)* | 2017-11-07 | 2018-03-09 | 昆山云景商务服务有限公司 | A kind of method of user's unified certification |
| CN109286633A (en)* | 2018-10-26 | 2019-01-29 | 深圳市华云中盛科技有限公司 | Single sign-on method, device, computer equipment and storage medium |
| CN110535882A (en)* | 2019-09-27 | 2019-12-03 | 南方电网科学研究院有限责任公司 | Identity authentication service method and system based on heterogeneous terminal |
- 2019
- 2019-12-31CNCN201911408143.5Apatent/CN111131301A/enactivePending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20170264612A1 (en)* | 2016-03-11 | 2017-09-14 | Oracle International Corporation | System and method for providing a universal security handler for a cloud-based integration platform |
| CN107786571A (en)* | 2017-11-07 | 2018-03-09 | 昆山云景商务服务有限公司 | A kind of method of user's unified certification |
| CN109286633A (en)* | 2018-10-26 | 2019-01-29 | 深圳市华云中盛科技有限公司 | Single sign-on method, device, computer equipment and storage medium |
| CN110535882A (en)* | 2019-09-27 | 2019-12-03 | 南方电网科学研究院有限责任公司 | Identity authentication service method and system based on heterogeneous terminal |
Non-Patent Citations (1)
| Title |
|---|
| 沈杰: "《省级政务服务网统一用户管理及认证系统的设计与实现》", 《中国优秀硕士学位论文全文数据库 信息科技辑》* |
Cited By (22)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111625800A (en)* | 2020-06-05 | 2020-09-04 | 光载互联(杭州)科技有限公司 | Digital identity authentication method and system based on in-vivo detection |
| CN111770088A (en)* | 2020-06-29 | 2020-10-13 | 南方电网科学研究院有限责任公司 | Data authentication method, apparatus, electronic device and computer-readable storage medium |
| CN112235285B (en)* | 2020-10-12 | 2023-01-10 | 山东浪潮智慧医疗科技有限公司 | Method and system for user authentication mode and service based on non-session |
| CN112235285A (en)* | 2020-10-12 | 2021-01-15 | 山东健康医疗大数据有限公司 | Method and system for user authentication mode and service based on non-session |
| CN114793243A (en)* | 2021-01-26 | 2022-07-26 | Sap欧洲公司 | One-time use authorization code in self-contained format |
| US12381732B2 (en) | 2021-01-26 | 2025-08-05 | Sap Se | Single-use authorization codes in self-contained format |
| US12113903B2 (en) | 2021-01-26 | 2024-10-08 | Sap Se | Long-lasting refresh tokens in self-contained format |
| US11757645B2 (en) | 2021-01-26 | 2023-09-12 | Sap Se | Single-use authorization codes in self-contained format |
| CN113468504A (en)* | 2021-07-01 | 2021-10-01 | 厦门悦讯信息科技股份有限公司 | Method and system for single client to access multiple servers |
| CN114139141A (en)* | 2021-10-21 | 2022-03-04 | 北京快乐茄信息技术有限公司 | Unified authentication method, device, terminal and storage medium |
| CN116107270A (en)* | 2021-11-11 | 2023-05-12 | 上海宝信软件股份有限公司 | Unified Authorization Method and System in Multi-Base Industrial Scenario of Headquarters |
| CN114417363A (en)* | 2021-11-16 | 2022-04-29 | 中国农业银行股份有限公司深圳市分行 | A method, system and storage medium for realizing bank application security control |
| CN115442071A (en)* | 2022-07-26 | 2022-12-06 | 新奥新智科技有限公司 | Functional authority management method, device, electronic device and storage medium of an item |
| CN115085944A (en)* | 2022-08-22 | 2022-09-20 | 四川蜀天信息技术有限公司 | Multi-space scene RESTful API unified user authentication management method and system |
| CN115396205B (en)* | 2022-08-26 | 2024-07-26 | 上海浦东发展银行股份有限公司 | Integrated authorization system and method thereof |
| CN115396205A (en)* | 2022-08-26 | 2022-11-25 | 上海浦东发展银行股份有限公司 | Integrated authorization system and method thereof |
| CN115567885A (en)* | 2022-09-27 | 2023-01-03 | 山东浪潮科学研究院有限公司 | Mobile phone short message authorization trusteeship service system |
| CN115567885B (en)* | 2022-09-27 | 2023-09-05 | 山东浪潮科学研究院有限公司 | Mobile phone short message authorized hosting service system |
| CN115952487A (en)* | 2023-03-14 | 2023-04-11 | 青岛安工数联信息科技有限公司 | Tenant information configuration system and method under various organizations |
| CN117353975A (en)* | 2023-09-08 | 2024-01-05 | 国联人寿保险股份有限公司 | Multi-terminal security unified login authorization system and method based on enterprise WeChat |
| CN117353975B (en)* | 2023-09-08 | 2024-03-29 | 国联人寿保险股份有限公司 | Multi-terminal security unified login authorization system and method based on enterprise WeChat |
| CN117675338A (en)* | 2023-12-04 | 2024-03-08 | 佛山众陶联供应链服务有限公司 | Method and system for communicating different authentication systems |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111131301A (en) | Unified authentication and authorization scheme | |
| US12199971B2 (en) | System and method for transferring device identifying information | |
| AU2019210633B2 (en) | Mobile multifactor single-sign-on authentication | |
| CN102638454B (en) | A plug-in single sign-on integration method for HTTP authentication protocol | |
| US9191375B2 (en) | System and method for accessing integrated applications in a single sign-on enabled enterprise solution | |
| US8838959B2 (en) | Method and apparatus for securely synchronizing password systems | |
| US9172541B2 (en) | System and method for pool-based identity generation and use for service access | |
| US9122865B2 (en) | System and method to establish and use credentials for a common lightweight identity through digital certificates | |
| CN110535851A (en) | A kind of customer certification system based on oauth2 agreement | |
| CN108600203A (en) | Secure Single Sign-on method based on Cookie and its unified certification service system | |
| CN101674285B (en) | Single sign-on system and method thereof | |
| CN108632241B (en) | Unified login method and device for multiple application systems | |
| CN102469075A (en) | Integrated authentication method based on WEB single sign-on | |
| CN112468481A (en) | Single-page and multi-page web application identity integrated authentication method based on CAS | |
| CN106534219A (en) | Security authentication method and device for desktop cloud portal | |
| US10601809B2 (en) | System and method for providing a certificate by way of a browser extension | |
| CN109862024A (en) | A kind of the network authorization protocol access control method and system of cloud management system | |
| CN107204983A (en) | A kind of SCADA System for Wind Power Farm data transmission technology based on Session Initiation Protocol | |
| CN108243164B (en) | Cross-domain access control method and system for E-government cloud computing | |
| CN102571874A (en) | On-line audit method and device in distributed system | |
| CN102811210A (en) | An information card authentication method and system based on WS protocol | |
| US20040083296A1 (en) | Apparatus and method for controlling user access | |
| US20050273596A1 (en) | Architecture and design for central authentication and authorization in an on-demand utility environment using a secured global hashtable | |
| US20050188420A1 (en) | Architecture and design for central authentication and authorization in an on-demand utility environment | |
| CN107819564A (en) | A kind of design method of the single-node login system based on Public Key Infrastructure |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | Application publication date:20200508 | |
| RJ01 | Rejection of invention patent application after publication |