Study of cross-domain identity authentication in SOA environment

Jing-jing GUO; Jian-feng MA; Xin-xin GUO; Tao ZHANG

doi:10.11959/j.issn.2096-109x.2016.00111

您当前的位置：

首页 >

文章列表页 >

Study of cross-domain identity authentication in SOA environment

Papers | 更新时间：2024-06-03

- Study of cross-domain identity authentication in SOA environment
- Chinese Journal of Network and Information Security Vol. 2, Issue 11, Pages: 21-29(2016)
- 作者机构：
  
  1. 西安电子科技大学网络与信息安全学院，陕西西安 710071
  2. 通信信息控制和安全技术重点实验室，浙江嘉兴 314033
  3. 西安邮电大学计算机学院，陕西西安 710121
  4. 西安电子科技大学计算机学院，陕西西安 710071
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00111
  CLC： TP309
- Online First：2016-11，
  
  Published：15 November 2016
- 稿件说明：
移动端阅览
Jing-jing GUO, Jian-feng MA, Xin-xin GUO, et al. Study of cross-domain identity authentication in SOA environment[J]. Chinese Journal of Network and Information Security, 2016, 2(11): 21-29.
DOI：

Jing-jing GUO, Jian-feng MA, Xin-xin GUO, et al. Study of cross-domain identity authentication in SOA environment[J]. Chinese Journal of Network and Information Security, 2016, 2(11): 21-29. DOI： 10.11959/j.issn.2096-109x.2016.00111.

摘要

鉴于现在的网络越来越复杂，其中，用户数量大、服务类型多、安全机制不统一的特点决定了SOA环境中异构多域的情况，给出了一种基于模糊理论的信任管理方法，并将该方法与证书转换服务结合起来提出了一种 SOA 环境中的跨域认证方案，在该方案中，用户域使用信任管理方法来保证安全性，服务域结合信任管理与证书认证来保证安全性，并且用户可以透明地访问采用不同底层安全机制的域中服务，实现安全跨域认证。分析表明，该方案具有安全与普适的优势，可以满足SOA环境下身份认证的需求。

Abstract

For the network nowadays becoming more and more complex

the SOA environment has the properties of heterogeneous and multiple domain.A trust management scheme was proposed based on the fuzzy theory

and a cross-domain identity authentication in SOA was constructed by the combining of the trust management scheme with the credential transform service.During the authentication

a user’domain used the trust management scheme to guarantee its security

and the service provider’s domain used both the trust management and credential to ensure its security.Furthermore

the credential transform made users can access services in the domains whose security mechanism was different from the users’.It is shown that the proposed authentication scheme has superiority in both security and pervasive

and is suitable for the SOA environment.

关键词

Keywords

references

[EB/OL ] . http://www.ibm.com/developerworks/cn/webservices/ws-soaenterprise1/ http://www.ibm.com/developerworks/cn/webservices/ws-soaenterprise1/ .

蔡希尧 . 信息系统的发展与创新 [M ] . 西安：西安电子科技大学出版社 , 2011 .

CAI X Y . Development and innovations of information systems [M ] . Xi’an : Xidian University PressPress , 2011 .

YAO L , WANG L , KONG X W , et al . An inter-domain authentication scheme for pervasive computing environment [J ] . Computers and Mathematics with Applications , 2010 , 59 ( 2 ): 811 - 821 .

SINGH N , CHHABRA G , SINGH K P , et al . A secure authentication scheme in multi-operator domain (SAMD) for wireless mesh network [C ] // The International Conference on Data Engineering and Communication Technology . 2016 : 343 - 357 .

KHEDR W I , ABDALLA M I , ELSHEIKH A A.Enhanced inter-access service network handover authentication scheme for IEEE 802 . 16m network [J ] . IET Information Security , 2015 , 9 ( 6 ): 334 - 343 .

YAN J , LU Y , LIU Y , et al . Research on beidou-based inter-domain identity authentication for mobile object [C ] // 2014 IEEE Workshop on Advanced Research and Technology in Industry Applications (WARTIA) . 2014 : 923 - 926 .

Web service federation language (WS-Federation) version1.0 [EB/OL ] . http://www.pdfdrive.net/web-services-federation-language-ws-federation-version-1-e3427173.html http://www.pdfdrive.net/web-services-federation-language-ws-federation-version-1-e3427173.html .

Liberty alliance project . Liberty architecture overview v1.1 [EB/OL ] . http://www.projectliberty.org/specs/liberty-architecture-overview-v 1.0.pdf http://www.projectliberty.org/specs/liberty-architecture-overview-v 1.0.pdf .

OASIS . Security assertion markup language v2.0 [S ] . 2005 .

RFC 1510 . The kerberos network authentication service(V5) [S ] .

MELLO D E R , WANGHAM M S , SILVA DF J . Model for authentication credentials translation in service oriented architecture [J ] . Transactions on Computational Sciences Journal , 2009 , 5430 : 68 - 86 .

CAHILL V , GRAY E , SEIGNEUR J M , et al . Using trust for secure collaboration in uncertain environment [J ] . Pervasive Computing,IEEE , 2003 , 2 ( 1 ): 52 - 61 .

KAMVAR S , SCHLOSSER M,GARCIA-MOLINA H . The eigentrust algorithm for reputation management in P2P networks [C ] // The 12th International Conference on World Wide Web . 2003 : 640 - 651 .

BETH T , BORCHERDING M , KLEIN B . Valuation of trust in open networks [C ] // The European Symposium on Research in Security (ESORICS) . 1994 : 3 - 18 .

SONG S , HWANG K , MACWAN M . Fuzzy trust integration for security enforcement in grid computing [J ] . Network and Parallel Computing , 2004 , 3222 : 9 - 21 .

ZADEH L A . 模糊集合、语言变量及模糊逻辑 [M ] . 北京 : 科学出版社 , 1982 : 23 - 33 .

ZADEH L A . Linguistic variable and fuzzy logic [M ] . Beijing : Science PressPress , 1982 : 23 - 33 .

ALFAREZ A R , HALLES S . A distributed trust model [C ] // New Security Paradigms Workshop Langdale . 1997 .

汪培庄 , 李洪兴 . 模糊系统理论与模糊计算机 [M ] . 北京 : 科学出版社 , 1996 : 219 - 243 .

WANG P Z , LI H X . Fuzzy system theory and fuzzy computer [M ] . Beijing : Science PressPress , 1996 : 219 - 243 .

Views

1218

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

An identity and group authentication scheme for resource-constrained industrial control devices based on Chinese commericial cryptography

Survey of decentralized public key infrastructure

Blockchain-based cross-data center anonymous and verifiable identity authentication scheme

Lightweight terminal cross-domain authentication protocol in edge computing environment

Anonymous trust management scheme of VANET based on attribute signature

Related Author

Cao Jin

Yang Lan

Li Huan

Li Wei

Li Xinze

Sun Junjun

SHI Chaoming

YAN Zheng

Related Institution

Xidian University

Xinjiang Oilfield Company Digital Intelligence Technology Company

Shield Lab, Trustworthiness Lab, Huawei Technologies Co., Ltd.

State Key Laboratory of Integrated Services Network, Xidian University, Xi’ an

School of Cyber Engineering, Xidian University, Xi’ an

⁰