The study of multi-level authentication-based single sign-on system

Single Sign on (SSO) is a method for accessing resources within multiple systems. However, some security vulnerabilities exist in current SSO systems, and user´s experience is not convenient. This paper proposes an extension of SSO, named multi-level authentication-based SSO (MLA-SSO). In MLA-SSO, SPs are divided into several levels based on security intensity. This allows the model to benefit from key advantages in security of the scheme. In specific procedures, MLA-SSO adds security strategy consultations. So MLA-SSO can help users to realize unified login and logout in their ways. At last, the design and implementation of a prototype of MLA-SSO, i.e. SHARE, is introduced and discussed.