SINGLE SIGN-ON METHOD AND SYSTEM

摘要

Disclosed are a single sign-on method and system. The method includes: a terminal sending a service request to an RP; the RP acquiring the address of an authentication centre; the RP re-directing an authentication request thereof to the authentication centre via the terminal, or, the RP returning to the terminal a response used for directing the terminal toward the authentication centre to perform authentication; the terminal sending the authentication request to the authentication centre; the authentication centre authenticating the terminal by way of SIP Digest Authentication, and re-directing the authentication result to the RP via the terminal; during the authentication using SIP Digest Authentication, both the authentication centre and the terminal using an identical Hash value and random number to produce a shared key; and the RP providing a service to the terminal according to the authentication result. The method and system of the present invention support single sign-on RP authentication of a terminal without UICC.