Multi-Level Security Framework for OpenID and Its Applications

摘要

As a solution to Single Sign-On (SSO), OpenID can simplify users' operation process and reduce resource provider's overhead. Its application in the websites is becoming popular and the multi-level security of OpenID has also become a topic of concern. First the basic OpenID infrastructure is introduced, including its components, hierarchy and other key issues. A multi-level security framework for OpenID is proposed in the paper, which can solve the problem on access control of multi-level security. This framework can be applied to any rule-based security model.