Article Details

Abstract

This paper proposes a zero-modification authentication migration scheme based on gateways, aimed at addressing the challenge of seamlessly upgrading to a new commercial authentication platform in complex system environments. Its core lies in using a service gateway with dynamic routing capabilities as the central hub, which adapts to CAS protocol requests and progressively shifts traffic from the legacy authentication system to the new commercial platform through a whitelist mechanism. Simultaneously, unified LDAP directory services enable authentication across both old and new systems. Through multi-replica gateway deployment, gray scale traffic switching, and comprehensive rollback mechanisms, it ensures a user-transparent migration process, progressively phasing business systems into the new authentication platform. This scheme is universally applicable, providing a reusable technical framework for upgrading university authentication systems, significantly reducing migration costs and business risks.

Keywords

CAS authentication; service gateway; Single Sign-On (SSO): LDAP protocol

References

1. [1] Li Xiaoyong, Wang Fuxi Design and Implementation of Single Sign On System Based on Bills [J]. Modern Electronic Technology, 2015, 38 (13): 85-89, 92
2. [2] Xu Dandan, Li Peiyu, Zhang Shiqian, etc Multi factor identity authentication method in unified identity authentication system [J]. Journal of Fuzhou University: Natural Science Edition, 2023, 51 (5): 616-620
3. [3] Lin Zhida, Zhang Huabing, Guo Xianbin, etc Design of API Gateway for Microservice Architecture [J]. Ordnance Automation, 2025, 44 (7): 5-10, 36
4. [4] Wang Jingyu, Zhang Wei Research on Access Control Model and Algorithm Combining Attributes and RBAC [J]. Small and Micro Computer Systems, 2022, 43 (7): 1523-1528
5. [5] Pan Ruijie, Wang Gaocai, Huang Hengyi Management Method Based on Attribute Access Control Policy [J]. Computer Engineering and Design, 2022, 43 (3): 601-607
6. [6] MIRKOVIC J，PRIER G，REIHER P. Attacking DDoS at the Source [C]//10th IEEE International Conference on Network Protocols.Paris：IEEE，2002：312-321.
7. [7] SHAR L K，TAN H B K. Defeating SQL Injection [J].Computer，2013，46（3）：69-77.
8. [8] RIOS J，JHA S，SHWARTZ L. Localizing and Explaining Faults in Microservices Using Distributed Tracing [C]//2022 IEEE 15th International Conference on Cloud Computing (CLOUD).Barcelona：IEEE，2022：489-499.
9. [9] AUBRY P，MATHIEU V，MARCHAL J. ESUP-Portail: Open Source Single Sign-on with CAS (Central Authentication Service) [C]//EUNIS04–IT Innovation in a Changing World.Ljubljana：EUNIS，2004：172-178.
10. [10] Huang Xiufang, Wang Hai Implementation Plan for Unified Identity Authentication of University Digital Campus Based on LDAP [J]. Journal of Jiangsu University of Science and Technology: Natural Science Edition, 2015, 29 (6): 580-584
11. [11] Shan Pengrong, Yang Meihong, Zhao Zhigang, etc Design and Implementation of Elastic Scaling Solution Based on Kubernetes Cloud Platform [J]. Computer Engineering, 2021, 47 (1): 312-320

About the authors

Wang Xu (1982-), male, Han ethnicity, from Changchun, Jilin, assistant engineer, master's degree, research interests: natural language processing, machine learning, search engines; Corresponding author: Xu Guiman (1987-), female, Han ethnicity, from Suizhou, Hubei Province, assistant engineer, master's degree, research direction: communication and information systems; Guan Weihao (1974-), male, Han ethnicity, from Foshan, Guangdong, is a senior engineer with a bachelor's degree. His research interests include software engineering and data analysis.