Akıllı kartta sertifika tabanlı kullanıcı kimlik doğrulamalı openID

From the point of its users, federated identity systems provide great convenience to log in to varied web sites without bothering of registration in advance. Looking from a vantage point, federated identity management gives the opportunity to users of one IT system to access data and sources of another IT system seam-lessly and securely without handling a complete user administration. Single sign-on mechanisms manage user authentication process of these systems prompting log in once and assure access control across those multiple independent systems. OpenID is a widely used federated identity/single sign-on scheme generally implemented with username-password authentication. In this work, we augment the user authentication phase of OpenID with certificate-based authentication using smartcard technology. Our solution provides a secure method to authenticate the user with user's digital certificate written on the smartcard. Keywords: OpenID, digital certi cate, federated identity, single sign-on,certi cate-based user authentication, smartcard, smartcard-based OpenID.