Abstract: Using Restful Web services technology, this paper designs an identity authentication service. The service publishes the identity authentication as a Rest services for local and remote clients to call, while using cryptographic token way stores user authentication information in the client’s token, the server is no longer to save the authentication user information by using the Session, but by decrypting the token to access authentication user information, which not only ensures the security of the user’s information, but also makes the application server be of a good dynamic scalability.

Key words: Web service, information security, token, encrypt, decrypt