WO2009106214A3 - Client/server-system zur kommunikation gemäss dem standardprotokoll opc ua und mit single sign-on mechanismen zur authentifizierung sowie verfahren zur durchführung von single sign-on in einem solchen system - Google Patents

Client/server-system zur kommunikation gemäss dem standardprotokoll opc ua und mit single sign-on mechanismen zur authentifizierung sowie verfahren zur durchführung von single sign-on in einem solchen system Download PDF

Info

Publication number
WO2009106214A3
WO2009106214A3 PCT/EP2009/000772 EP2009000772W WO2009106214A3 WO 2009106214 A3 WO2009106214 A3 WO 2009106214A3 EP 2009000772 W EP2009000772 W EP 2009000772W WO 2009106214 A3 WO2009106214 A3 WO 2009106214A3
Authority
WO
WIPO (PCT)
Prior art keywords
opc
single sign
server
client
mechanisms
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/EP2009/000772
Other languages
English (en)
French (fr)
Other versions
WO2009106214A2 (de
Inventor
Stefan H. Leitner
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ABB Research Ltd Switzerland
Original Assignee
ABB Research Ltd Switzerland
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ABB Research Ltd Switzerland filed Critical ABB Research Ltd Switzerland
Priority to CN200980107162.2A priority Critical patent/CN101971184B/zh
Priority to EP09714971.0A priority patent/EP2250598B1/de
Publication of WO2009106214A2 publication Critical patent/WO2009106214A2/de
Publication of WO2009106214A3 publication Critical patent/WO2009106214A3/de
Priority to US12/858,137 priority patent/US8522333B2/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0815—Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/41—User authentication where a single sign-on provides access to a plurality of computers

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Telephonic Communication Services (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

Die Erfindung bezieht sich auf ein Verfahren und eine entsprechende Einrichtung zur Integration von Single Sign-On Mechanismen in ein Client/Server-System mit Kommunikation gemäß dem Standardprotokoll OPC UA, und zur Durchführung von Single Sign-On zur Benutzer-Authentifizierung und Autorisierung in einem solchen System. Im System ist mittels eines Kommunikations-Netzwerks (22) ein OPC UA Client (21) mit einem OPC UA Aggregating Server (24), und dieser wiederum mit unterlagerten OPC UA Servern (1, 2, 3) verbunden. Zur Integration von Single Sign-On Mechanismen wird der OPC UA Aggregating Server (24) ergänzt durch eine SSO-Komponente (25) zur Abbildung von Benutzer-Legitimationsdaten (credentials) - die bei einem Service-Aufruf benutzt werden - auf Identitäten in der Form, in der sie in den unterlagerten OPC UA Servern (1, 2, 3) gespeichert sind. Zur Durchführung von Single Sign-On mit Hilfe der SSO-Komponente (25) werden zu einem Service-Aufruf gehörige Benutzer-Legitimationsdaten dazu verwendet, um automatisiert nach entsprechenden abgebildeten Identitäten und nach betroffenen OPC UA Servern (1, 2, 3) zu suchen, und für jede Übereinstimmung beim jeweiligen OPC UA Server (1, 2, 3) mittels der abgebildeten Identität einen ActivateSession Service aufzurufen, wodurch der mit dem Service-Aufruf des Benutzers gewünschte Zugriff auf Daten hergestellt wird.
PCT/EP2009/000772 2008-02-26 2009-02-05 Client/server-system zur kommunikation gemäss dem standardprotokoll opc ua und mit single sign-on mechanismen zur authentifizierung sowie verfahren zur durchführung von single sign-on in einem solchen system Ceased WO2009106214A2 (de)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN200980107162.2A CN101971184B (zh) 2008-02-26 2009-02-05 根据标准协议opc ua通信且具有用于认证的单点登录机制的客户端/服务器系统及在这样的系统中实施单点登录的方法
EP09714971.0A EP2250598B1 (de) 2008-02-26 2009-02-05 Client/server-system zur kommunikation gemäss dem standardprotokoll opc ua und mit single sign-on mechanismen zur authentifizierung sowie verfahren zur durchführung von single sign-on in einem solchen system
US12/858,137 US8522333B2 (en) 2008-02-26 2010-08-17 Client/server system for communicating according to the standard protocol OPC UA and having single sign-on mechanisms for authenticating, and method for performing single sign-on in such a system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102008011191A DE102008011191A1 (de) 2008-02-26 2008-02-26 Client/Server-System zur Kommunikation gemäß dem Standardprotokoll OPC UA und mit Single Sign-On Mechanismen zur Authentifizierung sowie Verfahren zur Durchführung von Single Sign-On in einem solchen System
DE102008011191.0 2008-02-26

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US12/858,137 Continuation US8522333B2 (en) 2008-02-26 2010-08-17 Client/server system for communicating according to the standard protocol OPC UA and having single sign-on mechanisms for authenticating, and method for performing single sign-on in such a system

Publications (2)

Publication Number Publication Date
WO2009106214A2 WO2009106214A2 (de) 2009-09-03
WO2009106214A3 true WO2009106214A3 (de) 2009-11-12

Family

ID=40896771

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2009/000772 Ceased WO2009106214A2 (de) 2008-02-26 2009-02-05 Client/server-system zur kommunikation gemäss dem standardprotokoll opc ua und mit single sign-on mechanismen zur authentifizierung sowie verfahren zur durchführung von single sign-on in einem solchen system

Country Status (5)

Country Link
US (1) US8522333B2 (de)
EP (1) EP2250598B1 (de)
CN (1) CN101971184B (de)
DE (1) DE102008011191A1 (de)
WO (1) WO2009106214A2 (de)

Families Citing this family (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8755519B2 (en) 2011-06-29 2014-06-17 International Business Machines Corporation Lattice scheme for establishing a secure multi-identity authentication context
JP5377799B1 (ja) * 2012-07-26 2013-12-25 三菱電機株式会社 プログラマブルロジックコントローラ
US8972797B2 (en) * 2012-10-08 2015-03-03 General Electric Company System and method for application debugging
US8997186B2 (en) * 2013-01-24 2015-03-31 General Electric Company System and method for enhanced control system security
US9904266B2 (en) * 2013-04-25 2018-02-27 General Electric Company Real-time debugging systems and methods
CN104348790A (zh) * 2013-07-30 2015-02-11 华耀(中国)科技有限公司 一种实现自定义配置aaa框架的方法及系统
US9166791B2 (en) 2013-11-20 2015-10-20 At&T Intellectual Property I, L.P. Method and apparatus for user identity verification
US9641512B2 (en) * 2014-04-10 2017-05-02 EMC IP Holding Company LLC Identity protocol translation gateway
WO2015188852A1 (de) * 2014-06-10 2015-12-17 Siemens Aktiengesellschaft Verfahren und vorrichtung zur transaktionserweiterung bei opc ua
WO2016004997A1 (de) * 2014-07-10 2016-01-14 Siemens Aktiengesellschaft Verfahren und vorrichtung zur energieoptimierten datenübertragung mittels opc ua protokoll
EP3275215B1 (de) * 2015-03-27 2019-02-13 Bühler AG Adaptives anlagenübergreifendes steuerungs- und lenksystem und zugehöriges verfahren dafür
EP3182235B1 (de) 2015-12-18 2019-03-27 Siemens Aktiengesellschaft Verfahren und industrielle steuerung zum aufruf einer funktion eines steuerungsprogramms mittels eines opc ua aufrufs
FI127806B (en) * 2017-12-22 2019-02-28 Prosys Opc Oy A method, a system and a computer program product for managing OPC UA server capacity
KR102371120B1 (ko) * 2018-06-29 2022-03-07 한국전자기술연구원 AutomationML to OPC UA 산업 표준을 이용한 산업용 공정 장비 시스템의 고도화 운용 방법
CN109639701B (zh) * 2018-12-25 2021-06-29 杭州迪普科技股份有限公司 基于opc协议的访问控制方法、装置、设备及存储介质
EP3723346B1 (de) * 2019-04-10 2024-08-21 ABB Schweiz AG Selektive adressraumaggregation
EP3723345B1 (de) 2019-04-10 2025-05-28 ABB Schweiz AG Weiterleitung von knotendaten mittels eines aggregierenden servers
EP3890277B1 (de) * 2020-03-31 2024-01-03 ABB Schweiz AG System und verfahren zur aggregation von daten in einem entfernten adressraum
US20230015789A1 (en) * 2021-07-08 2023-01-19 Vmware, Inc. Aggregation of user authorizations from different providers in a hybrid cloud environment
EP4149089B1 (de) * 2021-09-09 2025-07-02 Abb Schweiz Ag Fassadenserver

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001011450A1 (en) * 1999-08-05 2001-02-15 Sun Microsystems, Inc. Single sign-on framework with trust-level mapping to authentication requirements
WO2007068716A1 (en) * 2005-12-15 2007-06-21 International Business Machines Corporation Method, apparatus and program products for custom authentication of a principal in a federation by an identity provider

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7093291B2 (en) * 2002-01-28 2006-08-15 Bailey Ronn H Method and system for detecting and preventing an intrusion in multiple platform computing environments
US20040098615A1 (en) * 2002-11-16 2004-05-20 Mowers David R. Mapping from a single sign-in service to a directory service
CN100502307C (zh) * 2006-02-21 2009-06-17 华为技术有限公司 一种集中用户安全管理方法及装置
CN101060520A (zh) * 2006-04-21 2007-10-24 盛趣信息技术（上海）有限公司 基于Token的SSO认证系统
US8151317B2 (en) * 2006-07-07 2012-04-03 International Business Machines Corporation Method and system for policy-based initiation of federation management
US8091119B2 (en) * 2007-08-22 2012-01-03 Novell, Inc. Identity based network mapping
DE102007062986B4 (de) * 2007-12-21 2013-12-24 Abb Research Ltd. Verfahren und Einrichtung zur Client-Server-Kommunikation gemäß dem Standardprotokoll OPC UA
DE102007062985B4 (de) * 2007-12-21 2014-01-02 Abb Research Ltd. Verfahren und Einrichtung zur Kommunikation gemäß dem Standardprotokoll OPC UA in einem Client-Server-System

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001011450A1 (en) * 1999-08-05 2001-02-15 Sun Microsystems, Inc. Single sign-on framework with trust-level mapping to authentication requirements
WO2007068716A1 (en) * 2005-12-15 2007-06-21 International Business Machines Corporation Method, apparatus and program products for custom authentication of a principal in a federation by an identity provider

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
CHU S ET AL: "WEB-BASED SINGLE SIGN-ON SOLUTIONS: AN SSO PRODUCT MATRIX", COMPUTER SECURITY JOURNAL, CSI COMPUTER SECURITY INSTITUTE, XX, vol. 16, no. 1, 1 January 2000 (2000-01-01), pages 39 - 49, XP008021056, ISSN: 0277-0865 *
STEFAN-HELMUT LEITNER ET AL: "OPC UA Service-oriented Architecture for Industrial Applications", GEMEINSAMER WORKSHOP DER FACHGRUPPEN OBJEKTORIENTIERTE SOFTWAREENTWICKLUNG (OOSE), SOFTWARE-REENGINEERING (SRE) UND SOFTWARE-ARCHITEKTUREN (SW-ARCH) AM 27. OKTOBER 2006 IN LADENBURG,, 27 October 2006 (2006-10-27), XP007909798, Retrieved from the Internet <URL:http://pi.informatik.uni-siegen.de/stt/26_4/01_Fachgruppenberichte/OR A2006/01_ORA2006-Bericht.pdf> [retrieved on 20090916] *

Also Published As

Publication number Publication date
EP2250598A2 (de) 2010-11-17
EP2250598B1 (de) 2018-04-18
US8522333B2 (en) 2013-08-27
DE102008011191A1 (de) 2009-08-27
CN101971184A (zh) 2011-02-09
US20110035792A1 (en) 2011-02-10
CN101971184B (zh) 2015-01-28
WO2009106214A2 (de) 2009-09-03

Similar Documents

Publication Publication Date Title
US8522333B2 (en) Client/server system for communicating according to the standard protocol OPC UA and having single sign-on mechanisms for authenticating, and method for performing single sign-on in such a system
WO2005062989A3 (en) Authentication system for networked computer applications
WO2010117587A3 (en) Identity management services provided by network operator
US20130067550A1 (en) Private cloud server and client architecture without utilizing a routing server
WO2010060704A3 (en) Method and system for token-based authentication
NO20080532L (no) Distribuert enkel logg-pa-tjeneste
TW200802025A (en) Single one-time password token with single pin for access to multiple providers
WO2009155129A3 (en) Obtaining digital identities or tokens through independent endpoint resolution
WO2007109565A3 (en) User-administered single sign-on method and apparatus for network authentication
WO2008114256A3 (en) Trusted local single sign-on
WO2009115528A3 (en) Mobile terminal authorisation arrangements
WO2008030527A3 (en) Systems and methods for acquiring network credentials
WO2008047223A3 (en) Access control for a mobile server in a communication system
WO2006050074A3 (en) System and method for providing a multi-credential authentication protocol
WO2009001197A3 (en) A method of preventing web browser extensions from hijacking user information
WO2006118829A3 (en) Preventing fraudulent internet account access
CA2422334A1 (en) Authentication of network users
EP2898654B1 (de) Verfahren und vorrichtungen für sicheren zugriff auf einen webdienst
WO2009065154A3 (en) Method of and apparatus for protecting private data entry within secure web sessions
WO2010134859A3 (en) A method and arrangement for federating ratings data
WO2009117655A3 (en) Medical records network
US20130086634A1 (en) Grouping Multiple Network Addresses of a Subscriber into a Single Communication Session
WO2008142731A1 (ja) シード配信型ワンタイムｉｄ認証
FI20040871A7 (fi) Menetelmä, järjestelmä ja palvelin session siirtämiseksi tietoliikennejärjestelmässä
US8819794B2 (en) Integrating server applications with multiple authentication providers

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 200980107162.2

Country of ref document: CN

WWE Wipo information: entry into national phase

Ref document number: 2009714971

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 3084/KOLNP/2010

Country of ref document: IN

NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09714971

Country of ref document: EP

Kind code of ref document: A2