Security certification method and security certification system

Abstract

The invention provides a security certification method and a security certification system. The method includes: on receiving an access request from an application, acquiring preset single sign-on information in an address of the application; according to the preset single sign-on information, determining an application IP (internet protocol) and port information corresponding to the preset single sign-on information to allow the access to the application through the application IP and port information; during the access to the application, allowing security certification according to preset session data in a memory database. The security certification method and the security certification system have the advantages that service agency is achieved, the security of the system is better, and the system is imparted the functions of log auditing and permission controlling; session sharing is achieved so that the problem of non-uniformity in session information caused by the access to different servers is effectively avoided.

Description

technical field [0001] The present invention relates to the technical field of communication, in particular, to a security authentication method and a security authentication system. Background technique [0002] In related technologies, SAML (Security Assertion Markup Language, Security Assertion Markup Language) is a standard based on XML (Extensible Markup Language, Extensible Markup Language), used for exchanging authentication between different security domains (Security Domain) and authorization data. The SAML standard defines an identity provider (Identity Provider) and a service provider (Service Provider), which constitute the different security domains mentioned above. In addition, SAML is a product of the Security Services Technical Committee of the Organization for the Advancement of Structured Information Standards. [0003] Such as figure 1 As shown, the principle of the security authentication system in the related art is introduced in detail below: [000...

AI Technical Summary

Problems solved by technology

[0009] The 4A authentication implemented by the authentication system in the related technology is for the third-party application system. However, after the authentication passes and enters the third-party application system, the log and behavior monitoring of the third-party application system is not enough, and there is no Internal authorization management for third-party application systems

In addition, the SAML authentication service in related technologies supports cluster deployment, but does not support session sharing across servers in the background

Images