How the app interface guarantees security

Development or Gao de map, Baidu map What API to use, before using the need to register an account, then the system will give you a key, and then call the API when the key to the server.

In the ordinary company development projects, directly with MVC for the app client interface, has not been verified.

In order to be safe, we need to consider solving the security problem. Consulted with classmates, someone proposed that you define an encrypted string + real time timestamp, symmetric encryption. Every time the app requests an interface, it passes the encrypted string over the server-side decryption comparison, and then verifies that it is a legitimate request submitted by the client.

is trying to develop, not knowing whether it is reasonably useful.

How the app interface guarantees security