基于token令牌的水资源管理决策支持系统网络安全体系研究

Research on Network Security System of Water Resources Management Decision Support System Based on Token

随着水资源管理决策支持系统功能日趋复杂,系统安全和数据安全要求越来越高。基于token令牌的网络安全体系具有随机性强、不可预测性高、无法轻易破解等特点,十分契合当前Web应用互联互通的安全需求。为此,研究分析了传统Cookie/Session身份认证机制存在的不足,阐述了token身份认证机制的实现原理,研究了一套基于token的网络安全框架,结合水资源管理决策支持系统的业务需求,搭建了基于token令牌的水资源管理决策支持系统网络安全体系,提升了系统的网络安全等级,满足了当前复杂网络环境下水资源管理决策支持系统工程应用的需求。

With the increasingly complex functions of water resources management decision support systems,the requirements for system security and data security are getting higher and higher.The token-based network security system has the characteristics of strong randomness,high unpredictability and difficulty in cracking easily,which fits the current security requirements of web application interconnection and interoperability.To this end,the shortcomings of the traditional Cookie/Session identity authentication mechanism are analyzed,and the realization principle of the token identity authentication mechanism is expounded.A set of token-based network security framework is proposed,and combining with the business requirements of water resources management decision support system,the network security system of a water resources management decision support system based on token is built,which improves the network security level and meets the needs of engineering application of water resources management decision support system in current complex network environment.