Abstract: Apache Shiro is an unusual Java security framework, and the technology transfer service system use it for security is the first choice. A security authentication is realized by inheriting Realm abstract class in Shiro framework, and the purpose of information security is arrived by introducing configure files of Spring.

Key words: MVC, information security, Spring, XML, Java