Single-point login system and single-point login method

Abstract

The invention belongs to the technical field of information safety and relates to an authentication technology based on identifications, in particular to a single-point login system and a single-point login method which can be used for realizing safe single-point login among a plurality of application systems. The single-point login system comprises user key equipment and a login authenticating module which is arranged at the server end, wherein an identification private key or a composite private key is stored in the user key equipment; seed public key sets are stored in the server end and the user end; the user key equipment carries out interactive authentication with the login authenticating module at the server end when accessing a server; and the user key equipment is reformed so as to maintain an opening state after a PIN (Personal Identification Number) is input once, and the authentication work is automatically finished between the server end and the client end when the user accesses other application systems, therefore, the ideal effect of single-point login is achieved.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to an identification-based authentication technology, in particular to a single sign-on system and a single sign-on method, which can be used to realize secure single sign-on between multiple application systems. Background technique [0002] In consideration of security, more and more information systems begin to use dynamic passwords and login systems based on PKI certificates. Using the above system to implement access control is much safer than the common username and password method, but there are still many inconveniences for network users and system administrators: users have to do identity authentication every time they log in to a system, and system administrators have to do identity authentication. Separate security policies should be formulated for each application system, and users in each system need to be individually authorized to limit their access to unau...

AI Technical Summary

Problems solved by technology

Regardless of using session sharing technology or recording authentication information through cookies, there are problems that are not easy to save and easy to lose

In addition, the session method not only consumes resources, but also has a time limit. Once it times out, all information will be lost; and cookies can only be applied to user browsers that accept cookies, which also has considerable limitations.

The above methods are essentially indirect authentication and login through the process of trust transfer, and any behavior of extending the trust chain will increase security risks, and it is difficult to achieve single sign-on between C / S applications and B / S applications

Images