Web身份认证的安全性研究

Research on Security of Web Identity Authentication

文章研究了在身份认证中维持用户状态信息的两个重要对象Cookie和Session的工作原理,依据现有的理论基础,从Web应用程序中身份认证面临的实际问题出发,提出了Session不正常丢失的安全性问题.论文结合Session和Cookie的工作过程和加密等技术,提出具有实用性的解决方案,并将本文提出的解决方案应用于基于Web的网络考试系统中,证明了这种方案的适用性,达到本文的设计目的.论文的研究成果,可以为提高Web应用程序的安全性提供相应的解决方案.

This article study the working principle of cookie and Session which are two important objects maintaining the user status information at identity authentication.And according to existing theory,starting from the identity authentication＇s practical problems in the web application,proposed the safety problem of Session＇s abnormal loosing.This paper combines the working process of Session and cookie and encryption technology,proposed practical solutions.The research result of the thesis can supply corresponding solution to enhance the security of web applications.