Patent ID: 9015819
Filing Date: 2015-04-21
Classification: G06F,H04L,H04W

Abstract:
1. A method for single sign-on, comprising: a terminal sending an authentication request carrying a user identity identification to an application server (RP), and the RP redirecting the authentication request to an authentication center; the authentication center authenticating the terminal by means of session initiation protocol digest authentication (SIP Digest) and redirecting an authentication result to the RP via the terminal; and the RP providing services for the terminal according to the authentication result; wherein the user identity identification is an open identity identification (OpenID) and the authentication center is an OpenID Provider (OP); or, the user identity identification is an identity identification inputted into the terminal or an identity identification acquired when the terminal registers in an Internet Protocol Multimedia Subsystem (IMS) and the authentication center is a single sign-on authentication center (IdP); wherein, in the case that the user identity identification is the identity identification inputted into the terminal or the identity identification acquired when the terminal is registered in the IMS and the authentication center is the IdP and the authentication of the authentication center is successful, the method further comprises: the authentication center generating a third random number nonce1 and generating a second key K the authentication center encrypting the nonce1 and an authentication result RP_Auth for the RP by using the K the terminal obtaining the K the terminal decrypting the K the terminal using the K wherein, in the case that the user identity identification is the Open ID, the authentication center is the OP, and the authentication of the authentication center is successful, the method further comprises: the authentication center generating a third random number nonce1 and generating a second key K the authentication center encrypting the nonce1 and an authentication assertion RP_Assert for the RP by using the K the terminal obtaining the K the terminal decrypting the K the terminal using K