An SAML based SSO architecture for secure data exchange between user and OSS

Due to the extensive use of e-commerce or other network applications through the internet, a great magnitude of attention has been paid to information security issue. Albeit existing SSL based transmission is unbefitting for the applications which require partial encryption of data. Also the PKI based service is very complex due to its structure and code and requires much cost and effort during test. Considering the above facts, we use SAML (Security Assertion Markup Language) based XML which provide 'Single Sign On' between businesses. XML based technology can encrypt part of data or entire data and then transmit to the end receiver and exchange the data easily between systems due to its simple structure. We designed an authentication system which can exchange the security information between user and OSS in VPN. We tested, analyzed and compared the performance of each authentication system using assertion and artifact.