Information system data interface authentication method under HTTP stateless protocol based on token

Abstract

The invention discloses an information system data interface authentication method under an HTTP stateless protocol based on a token, and belongs to the field of Web application privacy communication.The main characteristic of the method is that when a client accesses a data interface for multiple times, authentication information including an account and a password needs to be provided only forfirst access. A server performs identity authentication through access to a database and transmits token information to the client. In the subsequent access, the client only needs to provide the tokeninformation obtained in the first access, and the server only verifies the token information without access to the database. Access authentication of the data interface is realized based on the token, the possibility of leakage of identity information including the account and the password in an access process is reduced, and the system security is improved. Besides, the server does not need to perform frequent access operations on the database during authentication of the same request source, and the occupation of system resources is reduced.

Description

technical field

[0001] The invention relates to a token-based information system data interface authentication method under the HTTP stateless protocol, which belongs to the field of secure communication of Web applications. Background technique

[0002] The HTTP stateless protocol means that the HTTP protocol has no memory ability for transaction processing and access connections, that is, each request is independent, and its execution and results are not directly related to the previous request and subsequent requests. It will not be directly affected by the previous request response situation, nor will it directly affect the subsequent request response situation. The access to the data interface of the information management system under the traditional B / S architecture is based on the HTTP protocol. When the client accesses the server, it carries the authentication information to complete the identity authentication, such as matching the account password with the informa...

Images