基于SpringSecurity的Web系统安全模块的设计与实现-电子与通信工程专业论文.docxVIP

Abstract Information becomes the trend in today’s society. The implementation of Research Management Database has very important significance to improve the current information management status of the scientific management department as a method of information construction. Research Management Database puts high demands for system security forward which has a wide range of users, complex hierarchy and rich business resource. In order to solve the security issues of Research Management Database, this paper builds a simple, flexible and scalable security module. This paper follows the Java software architecture, combines with SSH framework, and with reference to Java security-related specifications, in close connection with the security requirements, selects the security framework of Spring Security to design and realize the security module. This paper completes the basic data management functions of account, role and right modules, and extends security authentication, access control and session management, authentication data source in Spring Security. For Research Management Database flexible security control feature, it designs a hierarchical account management and automatic role assignment mechanism, and designs a right system of tree structure to enhance the authority application friendly. This paper introduces the framework of SSH and Spring Security, improves application development efficiency of the security module, separates the development of security module and service module and reduces the code coupling. The security module which greatly reduces the volume brought about by the user account maintenance, offers a good usability and scalability, in particular, to achieve near-zero invasive to the systems development has also brought a very Great convenience. Keywords：Web Security; Spring Security Framework; Authentication and Authorization; Access Control; Hierarchical management 缩略语 AOP - Aspect Oriented Programming 面向切面编程 B/S – Browser/Server 浏览器/服务器 CAS