In recent years, the companies which build intranet/extranet with IP-VPN technology are increasing. From the viewpoint of security and convenience, in order to access the multiple enterprise servers which need authentication at the lime of access, it is desirable to permit a user to access the servers by onetime authentication (single sign-on) in which a user has access authority. In this paper, we explain the potential problems of conventional technologies for single sign-on, and propose the architecture of single sign-on system including an authentication server collaborating with network nodes, which could be adapted for even large-scale extranet environment.
展开▼
