基于混合加密算法的数据接口安全研究与实现

A Research and Implementation of Data Interface Security based on Hybrid Encryption Algorithm

在移动互联网时代,服务器数据接口存在很大安全隐患。目前很多的设计方案未能满足实际的业务需要。针对这些安全问题,从已有服务器数据接的安全设计方案出发,分析其优缺点,综合运用AES、M D 5等常用加解密算法对敏感数据进行加工,利用token技术识别用户状态,最终实现了用户登录的安全设计方案和服务器數据的安全方案设计。实践证明,实现的安全设计方案在实际的移动项目应用中具有很好的利用及参考价值。

There are many security problems in server data interface in this era of mobile Internet.At present,many design schemes fail to meet the actual business needs.In view of those security problems,this article analyzes the advantages and disadvantages of the existing security design scheme of server data interface as a start,comprehensively uses AES,MD5 and other common encryption and decryption algorithms to process sensitive data,uses token technology to identify user status,and finally implements the security scheme design of user login and server data.Practice shows that the security scheme implemented is valuable for application and reference the actual mobile project application.