摘要： 采用集中式管理的架构，提出了一套新的SSO方案，避免了每次使用资源都需要一次登录的问题，可以节约大量的资源和带宽。与现有的SSO方案相比，该方案进行了简化，同时考虑了与数字家庭目前使用的UPnP协议的兼容，尤其在登录完成后可以主服务器离线这一性质是现有所有SSO方案都不具备的，特别适合数字家庭领域的应用。

关键词: 数字家庭, 单次登录, Kerberos, 网络攻击

Abstract: This paper introduces a new SSO scheme with central management. By avoiding every requirement of resource needs an additional logon, it can save lots of cost. In addition, this scheme simplifies existing schemes and taking account of the compatibility with UPnP. After the first logon, the proposal works well even if the host is offline, which is very suitable for digital home application.

Key words: Digital home, Single sign-on, Kerberos, Network attack

中图分类号: 

• TP393