Research and Application of Java Security System in Web Program
Java安全体系在Web程序中的研究和应用

Propose a security solving-scheme for Web program based on Java.The scheme realizes pluggable Authentication module by JAAS(Java Authentication Authorization Service),and take X509 digital certificate as user's identity authentication.Through configuring the Web server,and using the server certificate and client certificate,it actualizes the SSL bidirectional authentication between server and client.After the successful authentication,the HTTPS connection successfully established by negotiated symmetrical key between server and client can make the secure transmission of data.The scheme provides a secure interface for Web program which based on Java,and it can be transplant conveniently.