基于角色访问控制的单点登录模型研究与设计

摘要

Authentication and authorization are very complicated in web Services which consists many subsystems.In order to solve this problem,the technology about single sign-on was analyzed. Based on SSO and combined with RBAC ,a model with practical value was proposed and implemented, which can simplify account register and authorization management.%为了解决复杂Web服务中用户认证与权限管理的问题。对单点登录技术的进行了研究。在此基础上，根据单点登录技术的特点结合基于角色的控制访问提出了基于角色访问控制的单点登录与授权模型的实现方法。该方法能够提供认证与权限管理的功能，实现简单，具有较高实用价值。