應用於行動裝置之單一簽入系統設計

Abstract

本論文提出一種適用於智慧型行動裝置的第三方軟體單一簽入機 制， 來解決目前智慧型裝置上跨軟體使用同一個OAuth 認證服務時， 需要個別輸入登入資訊的缺點。本文透過一種登入代理器的架構來 實現單一簽入， 本機制設計的情境中，使用者僅需登入一次， 即可 在跨軟體間自動進行OAuth 2.0 帳號認證與資源存取授權。並且透過 OAuth 2.0標準延伸介面，使程式實現自動化登入功能。論文中我們利 用這個機制，實作一個適合年長者使用的社群服務，透過登入代理的 機制， 解決目前行動裝置OAuth 2.0需重複登入帳號密碼的缺點。

In order to resolve the problems of the repeated login form various kinds of smart phone applications which using the same OpenID account, a mobile agent for single sign-on (SSO) on smart device schemes is proposed. Under SSO, users need to login only one time by their authentication credentials( usually a username/password pair) in order to log into the OpenID account they subsequently use. This paper presents the design of an S-OAuth system that is based on a mobile agent, and that is suitable for use form an smart devices. Unlike existing OAuth-based schemes, which require users login on web page every time between different applications, the one presented here does not. An implementation of the scheme, called ‘S-OAuth’, is also described. The prototype is implemented as an mobile agent and OAuth 2.0 identity provider, resulting in a system that works with android smart devices and OAuth-based services.