Cookie-based secure single sign-on method and unified authentication service system thereof

Abstract

The invention discloses a Cookie single sign-on method, which comprises the following steps: a user sends a login request to a service server through a client browser; the service server is redirectedto a unified authentication service system according to the login request, and the unified authentication service system judges whether the service server carries a request certificate correspondingto the login request; the unified authentication service system writes the user credential into the Cookie and simultaneously splices the user credential to a redirected address; and the user credential is redirected to a user request page through the service server to execute the login request. The invention also discloses a unified authentication service system of the Cookie-based single sign-on, comprising a parameter analyzing module, an account checking module, a Cookie authentication module, a user credential generating module and a return module. The Cookie single sign-on method and theunified authentication service system in the invention realize the single sign-on core function, effectively solve the problems of cross-domain, distributed deployment, style distinction of application sites and the like, and improve the security of user authentication.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a Cookie-based secure single sign-on method and a unified authentication service system thereof. Background technique [0002] Single Sign On (SSO), referred to as SSO, is currently one of the more popular enterprise business integration solutions. The main solution of single sign-on is that in multiple application sites, users only need to log in once for authentication to access all related application sites. One of the application sites initiates a logout request, and other application sites also log out. Single sign-on seems to have a simple function, but in the process of system integration, you will encounter many personalized requirements, such as different login style requirements for different sites, different development languages ​​for different sites, and different docking methods for different sites, etc. These factors will lead to System integration is more diffi...

AI Technical Summary

Problems solved by technology

Single sign-on seems to have a simple function, but in the process of system integration, you will encounter many personalized requirements, such as different login style requirements for different sites, different development languages ​​for different sites, and different docking methods for different sites, etc. These factors will lead to System integration is more difficult

Therefore, the traditional single sign-on has the disadvantages of low security, stability and usability.

Images