Journal of South China University of Technology (Natural Science Edition) ›› 2005, Vol. 33 ›› Issue (2): 65-69.

Previous Articles     Next Articles

Single Sign-on Protocol for Web Services

Zheng Dong-xi  Tang Shao-hua  Li Shao-fa   

  1. College ofComputer Science&Engineering,South China Univ.ofTech.,Guangzhou 510640,Guangdong,China
  • Received:2004-04-28 Online:2005-02-25 Published:2005-02-25
  • Contact: 郑东曦(1976-)，男，博士生，主要从事网络安全及Web服务方面的研究 E-mail:zhengdongxi@163.com
  • About author:郑东曦(1976-)，男，博士生，主要从事网络安全及Web服务方面的研究
  • Supported by:

    国家自然科学基金资助项目(60273064)

PDF

718

Abstract:

In order to securely authenticate users in a Web-service-based cross·application system,a protocol for the single sign·on in a cross·application system is proposed by using the single sign·on scheme.It is named Web Services Single Sign·on(WSSS).This protocol is based on the existing security specifications for Web services.The architecture,messages and flow of the protocol are then described in detail.Moreover,the description and a-nalysis of the proposed protocol are carried out by using the formalization method and a security analysis of the pro-tocol is made.The single sign-on services defined in WSSS can be applied to various Web applications to provide Web-service-based authentication.

Key words: Web service, single sign-on, security protocol