Java APP interface security design, javaapp Interface

Java APP interface security design, javaapp Interface

Java APP interface security design

 

There are two security designs:

1. Transmission Security.

2. Session Security.

 

1. Transmission Security

How can I ensure that the interface is not captured during network transmission?

1. If the symmetric algorithm is used, the APP can obtain the encryption key to decrypt the intercepted transmitted data.
2. If only asymmetric algorithms are used, the Data Encryption length is limited.
3. Solution: symmetric algorithm + asymmetric algorithm.

 

 

 

Session-related

1. Each login generates a unique encryption KEY,
Set the validity period for the Encrypted KEY. In this way, the user cannot forge sessions after sniffing.
2. In addition to RSA-encrypted keys, other parameters are encapsulated in a single parameter param. the backend splits the parameter into multiple parameters for use by the program, in this way, interface parameters cannot be analyzed through the sniffing address. Increase the difficulty of cracking.

 

 

Shared learning and communication group: