文档介绍：上海交通大学
硕士学位论文
移动业务门户SSO系统的设计与实现
姓名:王加昌
申请学位级别:硕士
专业:计算机科学与应用
指导教师:陈克非
20070101
摘要

当前,企业应用的规模和数量都在呈爆炸性增长,而用户需求也越来越趋于
多样化。完成用户的一项特定需求往往需要多个应用系统的合作,也使得企业应
用系统之间的交互越来越频繁,而几乎任企业应用都不可避免的涉及到用户认证
问题,这就导致用户在实现某一特定业务请求时经常需要同时在多个系统上进行
登录及认证,这不只给用户带来不便,也阻碍了企业应用系统的进一步发展。单
点登录解决了用户这样的烦恼。用户只需要进行一次登录即可以访问信任域内的
任何系统。
本文在充分研究了目前国内外单点登录系统的解决方案的基础上,着重分析
了目前的单点登录系统研发中存在的现实问题,针对这些存在的问题,从上海移
动个人数据业务门户项目的实际出发,采用 Session 机制,并结合跨平台的 J2EE
架构以及 Web Services 技术,给出了一套自行设计的安全实用同时具有示范指导
意义的单点登录解决方案,同时还针对目前普遍存在的 SSO 系统整合需求提出
了解决方案。文章对该方案中涉及的关键模块给出了详细的流程设计,并针对设
计给出了参考实现。论文最后对所做工作进行了总结,并提出了下一步的研究工
作重心。本论文的选题来源于上海移动个人数据业务门户项目。

关键词: 单点登录 J2EE Web 服务 SSO 集成

3
Abstract

Nowadays, the scale and quantity of enterprise application are increasing
explosively, and the user’s requirements are also ing more and more
diversification. It always needs cooperation between many application systems, which
makes the interaction between enterprise application systems e more and more
frequent. Almost every enterprise application relates to user certification inevitably.
User needs to login many systems when he want to realize a specific business, which
not only brings inconvenience to users, but hinders the development of enterprise
application. Single sign-on solves this trouble. User can access any systems in credent
domain with login one time only.
On the basis of research of current SSO solutions, this paper analyzed the
problems existed in current SSO Systems on emphasis. At the same time, aiming at
these problems, bining with the fact of SDP project, this paper
implemented a SSO solution, which adopted session mechanism and
platform-independent J2EE and Web Services. This solution provides a best practice.
This paper presented the detail flow designs and reference implementation of the key
modules. At the end, this paper gave a conclusion about the work and pointed next
research emphasis. The theme of this paper is r