关键词: 单点登录, 安全断言标记语言, SAML令牌, 会话密钥, 会话令牌, 动态激活算法

Abstract: Single sign-on is techniques which can overcome disadvantages of traditional authentication mechanism in service integration process，and is also a key issue must be investigate in multi-service operation system.After comparing many single sign-on schemes，especially the scheme based on SAML model，provides a single sign-on model based on dual-token mechanism.Besides SAML token，the model introduces session key and session token，and uses local session dynamic active algorithm，meets the demands in security and efficiency.

Key words: single sign-on, security assertion markup language, SAML token, session key, session token, dynamic active algorithm