Systems for managing authentication and authorization of users, and to support the user, methods for managing authentication and authorization of the user to access services of multiple networks, for the controller of authentication process a request message authentication. Select the combination of the controllers of authentication of search results, to authenticate a user.And find out the way to a domu00ecnio having business relationship with the domu00ecnio, home to the controller of authorisation process the request message service authorization, and execute service authorization for a controller of authentication and authorization to execute authenticates Tion and service authorization, in order to protect the user su00ecmbolo,And to the authority of access control in domestic domu00ecnio user authentication to provide the controller a profile information of the user signature limited, to achieve rapid authentication and authorization, and to achieve registration only to acces

摘要

Systems for managing authentication and authorization of users, and to support the user, methods for managing authentication and authorization of the user to access services of multiple networks, for the controller of authentication process a request message authentication. Select the combination of the controllers of authentication of search results, to authenticate a user.And find out the way to a domu00ecnio having business relationship with the domu00ecnio, home to the controller of authorisation process the request message service authorization, and execute service authorization for a controller of authentication and authorization to execute authenticates Tion and service authorization, in order to protect the user su00ecmbolo,And to the authority of access control in domestic domu00ecnio user authentication to provide the controller a profile information of the user signature limited, to achieve rapid authentication and authorization, and to achieve registration only to access multiple networks. And formats for information capacity of signature for a user su00ecmbolo,For a domu00ecnio having business relationship with domestic domu00ecnio a user for affirmation of authentication and authorization, and to a terminal of the user enter their credentials to access multiple networks across multiple administrative domu00ecnios. A record only to access multiple networks residing in multiple domains is exposed.In particular, the characteristics of the record only refer to the process of authentication and authorization made between areas of the administration of different network so that the terminal using the service end does not need to initiate explicitly the authentication process each LV Z that accesses a new service.This characteristic of single record of the invention can be extended for use in an environment of area land and the environment of area land. The areas not federated are capable of forming a chain of federation indirectly by other areas in order to use this invention. Therefore, the discovery of intermediate domains to form a chain of federation is also covered.The administration of user credentials to allow a field visit to execute authentication is also covered in this invention.