干旱区生态环境知识资源中心

SSO Service within a CoT provides a user with simple and convenient authentication service. However, as a number of CoT increases, the userfaces the same problem in that the user has to join a website and login to that website in another CoT every time he visits. In this paper, we have proposed noble method of the identity roaming to enable a user to sign up for one web site and extend the connectivity service in a location that is different from the home location where the user was registered and authenticated. We have applied Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2. 0 to provide the identity roaming service. We have also devised the concept of Federation Bridge that interconnects distributed CoTs to minimize the trust relationship. We only need to deploy one federation bridge to connect all CoTs in the Web.