Java开发网 Java开发网
注册 | 登录 | 帮助 | 搜索 | 排行榜 | 发帖统计  

您没有登录

» Java开发网 » Java Security  

按打印兼容模式打印这个话题 打印话题    把这个话题寄给朋友 寄给朋友    该主题的所有更新都将Email到你的邮箱 订阅主题
flat modethreaded modego to previous topicgo to next topicgo to back
作者 關於Single sign on
CK



发贴: 0
积分: 0
于 2003-02-16 10:53 user profilesend a private message to usersearch all posts byselect and copy to clipboard. ie only, sorry for netscape users:-)add this post to my favorite list
目前Single signon市場佔有率比較高就是 microsoft 的 passport 與 sun 的sun one.
這邊我想探討一些目前的機制與規範

以往要做Singlesign on,成本都很大的.當然要建置一個PKI系統更是環環相扣
大部分j2ee contain provider都是提供jaas來讓programmer來實作Single sign on
然而去年saml也正是成為w3c xml家族了
也因此許多大廠server像是weblogic,identity都在新的版本加入了這項機制
也多以web server最前端整合,還未做到application server為整合方式
如需對saml需要了解更多
可參考
SAML，http://www.oasis-open.org/committees/security/
Web Services Security Assertions (JSR155)，http://www.jcp.org/jsr/detail/155.jsp
當然一些軟體公司也提供了saml套件,saml規範雖提出了幾種use case
但其實並不是每種廠商有能follow那些use case,因此如您需要使用套件
可以先閱讀該套件文件
以下提供幾個有提供saml套件的廠商,您可以參考看看
JSAML，http://www.netegrity.com/
WASP，http://www.systinet.com/
隨之SAML的日漸重要,隨之Access control也會被探討.
另一項重要的XML家族XACML也會邁入w3c規範內
您可以參考
XACML，http://www.oasis-open.org/committees/xacml/

signal sign on確實帶給市場極大的商機與便利.
然而現在的市場PKi機制也尚有許多問題存在,像是國與國的憑證互通性.
在第二代PKI機制下,XKMS將會是重要的關鍵,雖然目前市場有提供PKI機制的廠商都還沒有這項功能.最主要的還是CA還沒有準備好.
您可以參考
XKMS，http://www.w3.org/TR/xkms/

PKI市場雖大,隨著現有市場PKi機制仍有許多課題還沒真正受大家注目.
未來的延伸更是值得您去注意
話說回來,整個市場環境若金流不熱絡活動
有再多好的技術和可能的市場前景.仍是需要等上一段時間才會在市場上出現

CK edited on 2003-02-25 22:14

作者 Re:關於signal sign on [Re:CK]
snowbug



CJSDN高级会员


发贴: 418
积分: 130
于 2003-02-21 23:48 user profilesend a private message to usersend email to snowbugsearch all posts byselect and copy to clipboard. ie only, sorry for netscape users:-)add this post to my favorite list
Should be "Single Sign On" (SSO), not "Signal Sign On" Smile


作者 Re:關於signal sign on [Re:CK]
menzy



版主


发贴: 754
积分: 113
于 2003-02-24 08:40 user profilesend a private message to usersearch all posts byselect and copy to clipboard. ie only, sorry for netscape users:-)add this post to my favorite list
不错，没注意的说


作者 Re:關於signal sign on [Re:CK]
floater

Java Jedi

总版主


发贴: 3233
积分: 421
于 2003-02-25 05:40 user profilesend a private message to usersearch all posts byselect and copy to clipboard. ie only, sorry for netscape users:-)add this post to my favorite list
It's always a 2-edge sword, it's convenient, but others could get your credit card numbers. As for passport, I don't trust it at all.

Anyone using securant?

"Any fool can write code that a computer can understand. Good programmers write code that humans can understand."
- Martin Fowler, Refactoring - Improving the Design of Existing Code
作者 Re:關於signal sign on [Re:CK]
menzy



版主


发贴: 754
积分: 113
于 2003-02-25 09:13 user profilesend a private message to usersearch all posts byselect and copy to clipboard. ie only, sorry for netscape users:-)add this post to my favorite list
有些时候不得不如此。
我们现在就希望通过一次性验证，可以实现本系统内授权操作和，如果涉及到的话，与另一个系统进行通讯。


作者 Re:關於Single sign on [Re:CK]
CK



发贴: 0
积分: 0
于 2003-02-25 22:25 user profilesend a private message to usersearch all posts byselect and copy to clipboard. ie only, sorry for netscape users:-)add this post to my favorite list
I am sorry for typing worse word.
thank you for your remind.

and
there are some methods to improve the problem about using credit card,
for examples, one-time password , dynamicc credit card number.

Of course, visa.com also offers the service, but it's not popular on the market.
Now, it's true that hackers begin to get credit card number and customers' infomation from banks. not just from web stores.

CK edited on 2003-02-25 22:29


flat modethreaded modego to previous topicgo to next topicgo to back
  已读帖子
  新的帖子
  被删除的帖子
Jump to the top of page

   Powered by Jute Powerful Forum® Version Jute 1.5.6 Ent
Copyright © 2002-2021 Cjsdn Team. All Righits Reserved. 闽ICP备05005120号-1
客服电话 18559299278    客服信箱 714923@qq.com    客服QQ 714923