Trusted Computing based open environment user authentication model

摘要: In federated identity management systems providers authenticate users of its realm via single sign-on and forward authentication assertion as a response to the service provider's requests. Secure is always challenging task in an open environment such Internet. The risk associated with authorization are user credentials stealing man-in-the-middle attack, platform infected virus or Trojan horse, provider collude each others. We reviewed current technologies' Kerberos, Liberty Alliance, OpenID Windows Live ID. However, existing have limitations weaknesses presence third parties, no trust, weak mechanism. this paper, we propose single-sign-on model for combine trusted module security trust systems. This excludes party involvement every transaction provider. plays role service. privacy analysis proposed shows our can achieve strong security, enhanced privacy.