A Security Mechanism for Front-end Data Interaction

doi:10.3969/j.issn.1006-2475.2019.07.021

Abstract

Abstract: The traditional front-end integration mode has been developed into a more common front-end separation mode. Although the front-end separation frame solves the problem of strong coupling between components, there is little mention of safety-related descriptions. According to the advantages and disadvantages of the current technology, based on the characteristics of RSA and AES algorithms, we studied and designed a security mechanism for data exchange between front and rear ends. It enhanced the stability and security of data transmission through RSA and AES hybrid encryption and trans-coding. The correctness of the data was verified by using the irreversible hash algorithm. The relevant business logic of the algorithm key was extracted to form a separate key management service.

Key words: data interaction, hash algorithm, RSA, AES, key management

CLC Number:

TP309.2

WU Wan-jian1, WU Xiao-yong2. A Security Mechanism for Front-end Data Interaction[J]. Computer and Modernization, doi: 10.3969/j.issn.1006-2475.2019.07.021.

References

［1］苏子瀚. 计算机网络数据安全策略探究［J］. 通讯世界, 2018(11):20-21.
［2］史博. 中国网络安全的现实挑战与应对策略［J］. 人民论坛, 2018(36):74-75.
［3］ ZOU L, ZHANG D J, HE F Z, et al. A fast and secure transmission method based on optocoupler for mobile storage［C］// Proceedings of the 3rd International Conference of Pioneering Computer Scientists, Engineers and Educators. 2017:251-261.
［4］ THANIKAIVEL B, PRANISA B. Fast and secure data transmission in MANET［C］// Proceedings of the 2012 International Conference on Computer Communication and Informatics. 2012, DOI: 10.1109/ICCCI.2012.6158859.
［5］ ARIVAZHAGAN I, KURUNJIMALAR R. Secure data transmission routing protocol for multicasting［C］// Proceedings of the 2012 International Conference on Advances in Engineering, Science and Management. 2012,2:586-591.
［6］魏兴国. HTTP和HTTPS协议安全性分析［J］. 程序员, 2007(7):53-55.
［7］王涛. HTTP协议技术浅析［J］. 中国新技术新产品, 2013(22):14.
［8］李晓峰,赵海,周艳,等. SSL协议及其应用［J］. 信息安全与通信保密, 2007(10):22-25.
［9］张宝玉. 浅析HTTPS协议的原理及应用［J］. 网络安全技术与应用, 2016(7):36-37.
［10］范展源,罗福强. JWT认证技术及其在Web中的应用［J］. 数字技术与应用, 2016(2):114.
［11］刘华. Base64编码算法的研究及Delphi实现［J］. 电脑知识与技术, 2017,13(2):78-79.
［12］周岚. 一种基于Base64编码的多图片上传技术研究［J］. 电脑知识与技术, 2018,14(31):106-108.
［13］王方鑫. Hash函数的相关分析和研究［J］. 科技经济导刊, 2018,26(30):187.
［14］王孟钊. 安全散列算法的应用研究与实现［J］. 信息技术, 2018,42(7):159-161.
［15］李青,陈靓,冯梅,等. 浅析几种典型数据加密算法［J］. 信息系统工程, 2017(11):148-149.
［16］王方鑫. 基于AES算法的研究［J］. 民营科技, 2018(12):189.
［17］周炳,高美珍,洪家平. 面向单片机及嵌入式系统的AES算法改进研究［J］. 单片机与嵌入式系统应用, 2018,18(9):42-46.
［18］张文锦,周荣,高燕,等. 基于AES算法的文件加密［J］. 软件导刊, 2017,16(6):180-182.
［19］尤宇峰. 基于AES和RSA组合加密算法在DOA中的设计与实现［D］. 成都:成都理工大学, 2018.
［20］平伟,贾文丽,孙月驰,等. 基于DES算法与RSA算法的数据加密技术在电子商务中的应用［J］. 软件导刊, 2018,17(5):198-200.
［21］弋改珍. RSA算法的研究与实现［J］. 现代计算机(专业版), 2018(30):12-14.
［22］王方鑫. 基于RSA签名方案的研究［J］. 电脑知识与技术, 2018,14(36):28-29.
［23］王方鑫. 基于RSA算法的分析和研究［J］. 电脑知识与技术, 2018,14(26):30-31.
［24］曹建国,王丹,王威. 基于RSA公钥密码安全性的研究［J］. 计算机技术与发展, 2007,17(1):172-173.

[1]	FU Hong-lin, ZHANG Tai-hong, YANG Ya-ting, Aizimaiti Aiwanier, MA Bo. Scenes Text Modification Network for Uyghur Based on Generative Adversarial Network [J]. Computer and Modernization, 2024, 0(01): 41-46.
[2]	LI Shi-da, XIANG Jian-wen. A Weakened Joint Reinforcement Method to Improve Robustness of Image Recognition Models [J]. Computer and Modernization, 2023, 0(10): 70-76.
[3]	WANG Xin, XIAO Tao-rui. GAN-based Adversarial Attacks on Face Recognition [J]. Computer and Modernization, 2023, 0(10): 115-120.
[4]	JIANG Lei, TANG Jian, YANG Chao-yue, LYU Ting-ting. Bearing Fault Diagnosis Based on CWGAN-GP and CNN [J]. Computer and Modernization, 2023, 0(07): 1-6.
[5]	LIU Jun, YUAN Lin, FENG Zhi-shang, ZHANG Biao, LIU Chao. Efficient Healing Key Management Scheme for UAV Group [J]. Computer and Modernization, 2023, 0(06): 103-109.
[6]	LIU Ya-qing, ZHANG Hai-jun, LIANG Ke-jin, ZHANG Yu, WANG Yue-yang. Text Summarization Generation Model Based on PGN-CL [J]. Computer and Modernization, 2023, 0(02): 66-71.
[7]	ZHUANG Wen-hua, TANG Xiao-gang, ZHANG Bin-quan, YUAN Guang-ming. High Illumination Visible Image Generation Based on Generative Adversarial Networks [J]. Computer and Modernization, 2023, 0(01): 1-6.
[8]	LI Hai-tao, HU Ze-tao, ZHANG Jun-hu. Method of Fish Image Expansion Based on NS-StyleGAN2 Network [J]. Computer and Modernization, 2023, 0(01): 13-17.
[9]	ZHOU Run-jia. Stock Movement Prediction Algorithm Based on Deep Learning [J]. Computer and Modernization, 2023, 0(01): 69-73.
[10]	QIAN Xiao-zhao, WANG Peng. Robust Defense Method for Graph Convolutional Neural Network [J]. Computer and Modernization, 2023, 0(01): 74-80.
[11]	JIANG Si-qing, CHEN Xiao-Jun, GAO Hao-Jun, HE Jia-jin, WU Jian, . Deep Learning Classification Algorithm for Electrocardiogram Signal Based on Adversarial Domain Adaptation [J]. Computer and Modernization, 2023, 0(01): 81-87.
[12]	LI Shi-bao, WANG Jie-wei, CUI Xue-rong, LIU Jian-hang, HUANG Ting-pei. Unrestricted Attack Based on Colorization [J]. Computer and Modernization, 2022, 0(11): 52-59.
[13]	ZHANG Bin, LI Da-peng, JIANG Rui, WANG Xiao-ming. An Off-chain Extended Storage Scheme for Blockchain Traceability [J]. Computer and Modernization, 2022, 0(10): 106-112.
[14]	ZHAI Hui-cong, ZHANG Ming, DENG Xing, WANG Li-qun. Image Animation Based on Generative Adversarial Networks [J]. Computer and Modernization, 2022, 0(07): 21-26.
[15]	CHEN Yun-xiang, WANG Wei, NING Juan, CHEN Yi-dan, ZHAO Yong-xin, ZHOU Qing-hua. PSWGAN-GP: Improved Wasserstein Generative Adversarial Network with Gradient Penalty [J]. Computer and Modernization, 2022, 0(04): 21-26.