The student's task is to program an SSO (Single Sign On) authentication in Java language using the implementation of Kerberos protocol in Microsoft Active Directory.

The student is required to study problems of transfer and working with TGT tickets (Ticket-Granting Ticket) and Session Tickets.
Next, the student should design an application which allows the user to authenticate against Kerberos KDC (Key Distribution Center) in Microsoft Active Directory and after a successful authentication, a storage of issued TGT ticket and a session ticket for selected service.
The thesis should include a demo application which enables to store an issued ticket in a smart card or a flash drive, according to the user's selection. Subsequently, using the smart card/flash drive, the user should authorise to the service and show that he is entitled to use the application.
In both options of the session ticket transfer, the student should consider risks of theft and use appropriate methods to reduce this risk.

This thesis is posted within AIF (Association of Industrial Partners) for Y Soft company.
RNDr. Ondřej Krajíček will be available as a consultant, the meetings will be held irregularly once a month. He can also be contacted for individual appointments.

The diploma thesis requires at least two terms; whilst its practical part should be completed during the first term.

Materials:

• AD Kerberos – http://technet.microsoft.com/en-us/library/cc753173(WS.10).aspx
• The Kerberos Network Authentication Service (V5) (RFC 4120) – http://tools.ietf.org/html/rfc4120
• SSO Using Kerberos in Java – http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/single-signon.html

The thesis is posted within the project of OP EC (Operational program Education for Competitiveness) with the title Platform of Research and Educational Cooperation of FI MU in Data Processing, Reg. No. CZ.1.07/2.4.00/12.0049 and activities of AIF.