The study of multi-level authentication-based single sign-on system

Single Sign on (SSO) is a method for accessing resources within multiple systems. However, some security vulnerabilities exist in current SSO systems, and user's experience is not convenient. This paper proposes an extension of SSO, named multi-level authentication-based SSO (MLA-SSO). In MLA-SSO, SPs are divided into several levels based on security intensity. This allows the model to benefit from key advantages in security of the scheme. In specific procedures, MLA-SSO adds security strategy consultations. So MLA-SSO can help users to realize unified login and logout in their ways. At last, the design and implementation of a prototype of MLA-SSO, i.e. SHARE, is introduced and discussed.