计算机科学 ›› 2018, Vol. 45 ›› Issue (3): 300-304.doi: 10.11896/j.issn.1002-137X.2018.03.049

• 交叉与前沿 • 上一篇    下一篇

基于缓存的分布式统一身份认证优化机制研究

杨冬菊,冯凯   

  1. 大规模流数据集成与分析技术北京市重点实验室 北京100144北方工业大学云计算研究中心 北京100144,大规模流数据集成与分析技术北京市重点实验室 北京100144北方工业大学云计算研究中心 北京100144
  • 出版日期:2018-03-15 发布日期:2018-11-13

Distributed and Unified Authentication Optimization Mechanism Based on Cache

YANG Dong-ju and FENG Kai   

  • Online:2018-03-15 Published:2018-11-13

摘要: 企业在进行应用系统集成时,普遍使用独立的身份认证系统来实现平台中身份信息的交换和共享。如何应对高并发、大用户流量的用户请求,是保障认证系统稳定、高效运行的重要问题。针对单认证中心负载过重,容易出现单点失效及系统响应慢的问题,提出了将认证服务器集群化的方案;将认证票据存储在缓存使得多个认证节点共享认证信息,并将重要且频繁使用的数据预存到缓存中以提高响应速度;结合复杂多样的用户行为提出了基于Hybrid的多因素缓存替换算法。实验结果表明,所采用的基于缓存的分布式认证架构能够保证系统的稳定性,提高系统的响应速度,改进的缓存替换算法提高了缓存命中率。

关键词: 应用系统集成,身份认证,高可用性,缓存机制,缓存替换算法

Abstract: When the enterprise integrates the application system,it is a common practice to use the independent authentication system to exchange and share the identity information of the platform.How to deal with user requests with high concurrency and large user traffic is an important issue to ensure the stable and efficient operation of the authentication system.In view of the overload of single authentication center,the single point failure and the slow response of the system,this paper proposed to cluster the authentication server.The authentication ticket is stored in the cache so that multiple nodes can share authentication information,and the important and frequently used data can be pre-fetched as cache to improve response speed.This paper proposed a multi-factor cache replacement algorithm based on Hybrid combining the complex and diversified user behavior to improve the effectiveness of data replacement.The experimental results show that the optimized distributed authentication architecture can guarantee system stability and improve system response speed,and the multi-factor cache replacement algorithm based on Hybrid can improve cache hit ratio.

Key words: Application system integration,Identity authentication,High availability,Cache mechanism,Cache replacement algorithm

[1] WANG Z R,LIU Z T,CAO Y.A L ightweight solution forcross-domain single sign-on [J].Computer Applications and Software,2013,30(7):268-270.
[2] CHEN M.Research and Application of Heterogeneous Systems Integration Technologies in Education Systems [D].South China University of Technology,2016.
[3] ZHAO V F.Design and implementation of the unified authentication platform based on CAS[J].Journal of Yunnan University,2013,5(22):165-168.
[4] QI F S,TIAN C Y,WEI H.The Design of High Available Single Sign-On Server of Nginx-Based[J].Applied Mechanics and Materials,2013,1-244:2411-2416.
[5] ZHU J,HU B,SHAO H,et al.Research of Lightweight Vector Geographic Data Management Based on Main Memory Database Redis[J].Journal of Geo-Information Science,2014,16(2):165-172.
[6] XU F H,CHEN X,LONG D.New distributed multi-user single sign-on system model [J].Application Research of Computers,2012,9(9):3355-3357,3364.
[7] WANG Y N,WU H R,HUANG F.Optimization analysis and research of high concurrency Web application system performance[J].Computer Engineering and Design,2014,35(8):2976-2981.
[8] REN C L,LI Z X,NIU X X,et al.Single Sign-On Model in Distributed Network [J].Computer Systems & Applications,2011 ,4(2):138-145.
[9] BELLOVIN S M,MERRITT M.Limitation of Kerberos authentication system[J].ACM Computer Communications Review,1990,0(5):119-132.
[10] LIU F,WANG Z,CAO H P,et al.Portal Single Sign-on Scheme Based on CAS[J].Computer Systems & Applications,2011,20(6):77-80,102.
[11] MEI H W,ZHANG M Q,LI T.Research of Website architecture with high load and high concurrency[J].Computer & Network,2009,5(14):54-57.
[12] ZENG C Y,LI J X.Redis application in cache system [J].Micro Computer & Its Applications,2013,2(12):11-13.
[13] BAO L H,HUANG Y F.Research on Architecture of HighConcurrent Website and Its Solution[J].Computer Science,2012,9(S2):184-187.
[14] ANDREW S.TANENBAUM.Modern operating systems[M].USA:Pearson.2007:258-271 .
[15] WILLIAMS S,ABRAMS M,STANDRIDGE C R,et al.Remo-val policies in network caches for World-Wide Web documents[C]∥Conference Proceedings on Applications,Technologies,Architectures,and Protocols for Computer Communications(SIGCOMM’96).New York:ACM,1996:293-305.
[16] LIU L,XIONG X P.Least cache value replacement algorithm[J].Journal of Computer Applications,2013,3(4):1018-1022.
[17] JIA L,ZHANG X Y.ACACRA:a Novel Cache Replacement Algrithm[J].Journal of Chinese Computer Systems,2011,32(7):1293-1297.

No related articles found!
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!