Cardspace论文数位标识安全令牌信息卡.docVIP

Cardspace论文：数位标识安全令牌信息卡【中文摘要】随着互联网技术的发展,如今校园网上存在着各种各样的教学资源,校际间实现资源共享的需求也越来越迫切。校园网的有效管理已经成为高校信息化的重要内容。在教学信息化过程中,我们需要对教学的电子资源进行管理,如教学视频、教学动画、电子文文件、电子书、网上测试资源等进行管理。如线上学堂,就是通过流媒体技术播放教师的讲课视频而实现的;在线网上测试系统通过随机从数据库抽取试题生成试卷,可以实现对学生考试的一体化。就目前而言,由于不同的教学资源不同的学校都有自己的身份认证系统,要享用这些资源就需要保存多个账户密码对,这给用户带来了不方便。Cardspace是建立在标识元系统的基础上的一种通用身份认证架构,基于标准的身份认证解决方案,能够让用户对网络上的身份标识进行统一、高效的管理。并且本身就是源自Web应用,因此非常适合整合到基于Web的校园网资源管理系统。课题针对校园网认证机制的现状、暴漏出的问题,重新剖析了Cardspace技术,并探讨Cardspace技术在校园网身份认证系统中的应用,研究其实现的技术细节。从认证信息存储和传输安全性以及用户可控性的角度对Cardspace在校园网网身份认证系统中的应用作了系统的分析和研究,并在此基础上提出了相应的扩展方案,使其在设计上从以认证角色为中心转变成为以用户为中心,提升用户体验,从而更容易得到推广,为该类系统今后的设计和发展提供了新方法、新思路。通过此技术的应用,校园网内部不同教学资源平台之间,不同校园网之间也能实现互通,用户一次登陆可到处通行,给用户提供了极大的方便,有利于此项技术的广泛应用。构建具有通用性的系统平台,提高安全性和可操作性,对于增强人们对网络的信心也大有好处。【英文摘要】With the development of Internet technology, there are a variety of campus online teaching resources and the demand of sharing of resources between different schools is more urgent. The effective management of campus network has become an important element of information technology in colleges and universities. In the process of teaching information technology, we need manage electronic resources used for teaching, such as managing teaching videos, teaching animation, electronic documents, e-books and online test resources. For example, online schools, it plays video lectures through streaming technology. Online web-based testing system drawn the examination questions randomly from the database generated papers, can achieve the integration of studentsexam. Different resources or different schools of teaching have its own authentication system, so, it is necessary store multiple account or passwords to benefit from these resources, which brings inconvenience to users. Cardspace is Microsofts standards-based authentication that allows users to have a unified and efficient management on network identity.This topic explores the application of Cardspace technology in identity authentication system and studies technical details of its implementation. It analyses and researches the implementation of Cardspace authentication system in campus network from the perspective of authentication information storage, transmission security and user control .On this basis, it also proposed a corresponding expansion program which is user-based and develops new methods and new ideas. With this technology, different campus network can achieve interoperability and user can single sign-on but access to everywhere. This gives users a great convenience and is conducive to the extensive application of this technology.【关键词】Cardspace 校园网身份认证系统 数位标识 安全令牌 信息卡【英文关键词】Cardspace campus network authentication system digital identity security token the information card【目录】Cardspace在校园网身份认证系统中的应用研究摘要4-5ABSTRACT5第一章 绪论8-201.1 课题背景与意义81.2 身份管理技术概述8-101.2.1 身份管理技术的研究背景和发展情况9-101.3 身份管理方面的研究成果10-151.4 身份管理面临的挑战15-20第二章 CARDSPACE 系统体系架构设计和实现20-422.1 CARDSPACE 身份认证方式20-332.1.1 Cardspace 概要21-292.2.2 Cardspace 认证29-302.2.3 Cardspace 体系结构30-322.2.4 Cardspace 优缺点分析32-332.2 CARDSPACE 身份认证方式的应用33-352.3 CARDSPACE 设计特点35-382.3.1 登录信息储存35-362.3.2 单点登录36-382.3.3 建立信任链382.4 提出的网站支持的CARDSPACE 身份认证系统38-42第三章 CARDSPACE 系统扩展42-503.1 系统改进42-443.2 校园网之间建立信任44-463.2.1 资源共享在校际之间的发展现状44-453.2.2 建立信任45-463.3 信任链的建立46-503.3.1 建立信任46-483.3.2 基于信息卡建立信任48-50