opcua服务器验证方式,根据标准协议opc ua通信且具有用于认证的单点登录机制的客户端/服务器系统及在这样的系统中实施单点登录的方法 According to the standard commu...

摘要：

本发明涉及一种方法和一种相应的装置,用于利用根据标准协议OPC UA的通信来将单点登录机制集成到客户端/服务器系统中,以及用于在这样的系统中实施单点登录以便用户认证和授权. The present invention relates to a method and a corresponding apparatus for use in accordance with standard protocol OPC UA communication to the single sign-on mechanism is integrated into a client / server system, as well as for implementing single sign-on in such a system for user authentication and authorization. 在系统中借助于通信-网络(22)使OPC UA客户端(21)与OPC UA聚集服务器(24)相连接并且该OPC UA聚集服务器又与下级的OPC UA服务器(1,2,3)相连接. By means of communication in the system - the network (22) so that OPC UA client (21) and OPC UA server aggregation (24) is connected and the OPC UA server has gathered and subordinate OPC UA servers (1,2,3) phase connection. 为了集成单点登录机制,OPC UA聚集服务器(24)补充有SSO-组件(25)用于映射在服务调用的情况下使用的用户-合法性数据(证书)到标识符,所述标识符所采取的形式是它们存储在所述下级的OPCUA服务器(1,2,3)中所采取的形式. In order to integrate single sign-on mechanism, OPC UA server aggregation (24) supplemented with SSO- assembly (25) in the case of user mapping service calls for the use of - the legitimacy of data (certificate) to the identifier, the identifier They take the form stored in the lower level of OPCUA server (1,2,3) in the form taken. 为了借助于SSO-组件(25)实施单点登录,属于服务调用的用户-合法性数据用于自动搜索相应映射的标识符以及搜索所涉及的OPC UA服务器(1,2,3),以及对于每个匹配,在相应的OPC UA服务器(1,2,3)中借助于所映射的标识符调用活动会话服务,由此建立了利用用户的服务调用对数据的期望访问. To aid SSO- assembly (25) to implement single sign-on, users belonging to a service call - the legitimacy of the data used to automatically search for the appropriate identifier mapping and search involved OPC UA server (1,2,3), and for each match, the corresponding OPC UA servers (1,2,3) is mapped by means of an active session identifier to call service, thereby establishing a call with the user's desired service access to data.

展开