抽象的な

Efficient Single Sign on Scheme for Distributed Networks

N. Rubiya (M.E-CSE), M. Arulprakash M.TECH.

Single sign-on (SSO) is a new authentication mechanism that enables a legal user with a single credential to be authenticated by multiple service providers in a distributed computer network. The existing Chang-Lee scheme is actually insecure by presenting two attacks i.e credential recovering attack, impersonation attack without credentials. The first attack allows a malicious service provider, who has successfully communicated with a legal user twice, to recover the user's credential and then to impersonate the user to access resources and services offered by other service providers. In another attack, an outsider without any credential may be able to enjoy network services freely by impersonating any legal user or a nonexistent user. In the Enhancement phase the work is based on to avoid the previous attacks that is impersonation and mounting. Once user enters into the service the portal will assign unique session id for each users with the unique key assignment for every machine. Once user request the service the portal will check the session id and the unique key (RSA signature scheme) for each request. If the authentication fails the user will not enjoy the distributed services.