Building a Secure Single Sign-On Platform Based on a Reverse Proxy

碩士 === 南台科技大學 === 資訊管理系 === 98 === With the rapid development of the Internet, the convenience of using the network has brought a great benefit to mankind. Diverse information system was developed to meet users' requirements on campus. But users often need to log in repeatedly for the different...

Full description

Bibliographic Details
Main Authors: Hsien, Jen-Wei, 謝仁瑋
Other Authors: 蘇建郡
Format: Others
Language:zh-TW
Published: 2010
Online Access:http://ndltd.ncl.edu.tw/handle/81767324034278864343
Description
Summary:碩士 === 南台科技大學 === 資訊管理系 === 98 === With the rapid development of the Internet, the convenience of using the network has brought a great benefit to mankind. Diverse information system was developed to meet users' requirements on campus. But users often need to log in repeatedly for the different systems in order to obtain access right, even with the same account and password. In this thesis, based on a reverse proxy, we proposed a single sign-on (SSO) platform and, through the platform, users can visit different application systems without repeating authentication. The proposed single sign-on platform consists of a reverse proxy and a middleware component. The external users can only connect to the reverse proxy instead of web servers. When users login to the platform, the middleware will record the users' account, password and related information, then refill these information into different applications to obtain the access right, and prevent the authentication information from being sniffed. We joined some popular campus websites into SSO platform, through several practical tests, the system then been verified it was implemented correctly. To avoid the network bottleneck caused by the single sign-on system, a simple load balancer has been designed in this thesis. Each new connection will be assigned to the least load SSO server to achieve the load balance.