如何安全地訪問分布式資源、同時降低資源提供者為認證訪問者所帶來的負擔一直是網格 應用發(fā)展的絆腳石。在分析現(xiàn)有解決方案的基礎上，介紹了Shibboleth 的解決方案，并對Shibboleth口令系統(tǒng)，如Shibboleth 組件、各組件的功能以及Shibboleth 的工作流程等進行了介紹。同時，對Shibboleth 的特點進行了分析，并指出了進一步的研究工作。
關鍵詞 Shibboleth，SAML，單點登錄，認證

Research on Shibboleth System Wei Rong1,2, Liao Zhensong3, Huang Xuepeng2 (1. International Software School, Wuhan University, Wuhan Hubei ,430071; 2. Information
Technology Department, Hubei Police College, Wuhan Hubei ,430034; 3.Cluster and Grid
Computing Lab, School of Computer, Huazhong University of Science and Technology, WuhanHubei ,430074) Abstract How to securely access distributed web resources and reduce the burden of authenticating the users is a key problem to the grid application and development. In the paper, the resolution of Shibboleth based on the analysis of existing ones is presented. At the same time, components ant its functions as well as the work flow of Shibboleth are introduced. Then the characters are given, including the future work.
Key Words Shibboleth, SAML, Single-Sign On, Authentication