Design of Kerberos Single Sign-On System under Complicated and Heterogeneous Application Environment

To achieve Single Sign-On for various complicated and heterogeneous application systems, a Kerberos Single Sign-On system, based on Web Service technology, is proposed. After analyzing the Kerberos authentication protocol, this paper designs a Single Sign-On system, according to the Kerberos protocol, which includes authentication module, ticket granting module and verification module. Additionally, based on both platform- and language-independent characteristics of Web Service technology, this paper presents a Single Sing-On web service to integrate application systems of different platforms and different programming languages. The experiment in real application scenario shows that the proposed Single Sing-On system can effectively integrate various application systems and accomplish the Single Sing-On under complicated and heterogeneous application environment.